Neither the registry or the School of Public Health nor a person, medical facility, or other organization providing or releasing information in accordance with this article may be held liable in a civil or criminal action for divulging confidential information unless the person or organization acted in bad faith or with malicious purpose.