(8) Any person in possession, whether lawfully or unlawfully, of information from the controlled substances prescriptions database that identifies an individual patient and who knowingly discloses such information to a person not authorized to receive or use such information under any state or federal law or rule or regulation, or the lawful order of a court of competent jurisdiction, or written authorization of the individual patient shall be guilty of a misdemeanor, punishable by imprisonment in a county jail not to exceed six (6) months, or by a fine not to exceed two thousand dollars ($2,000), or both. The foregoing criminal penalty is in addition to, and not in lieu of, any other civil or administrative penalty or sanction authorized by law. The provisions of this subsection shall not apply to disclosure of individual patient information by the patient himself. The provisions of this subsection shall not apply to disclosure of information by a prosecuting attorney, deputy prosecuting attorney or special prosecutor of a county or city or by a special assistant attorney general from the office of the attorney general in the course of a criminal proceeding, whether preconviction or postconviction. see full law