(1) The office may impose penalties for the inappropriate disclosure or use of direct patient identifiers, indirect patient identifiers, and proprietary financial information received from, provided to, or contained in the WA-APCD.

(2) Any penalty imposed pursuant to this subchapter and in accordance with RCW 43.371.050 shall be in addition to and does not prevent the assessment of penalties authorized by state or federal law, contract, or court order.

(3) The following definitions apply to WAC 82-75-600 through 82-75-665.

(a) "Inappropriate disclosures" or "uses" are those that are inconsistent or in violation of the requirements in RCW 43.371.050. In addition, inappropriate disclosure or uses also include defamatory or malicious use and disclosure or use and disclosure with the intent to cause harm.

(b) "Protected information" is direct patient identifiers, indirect patient identifiers and proprietary financial information.