A person subject to this article who intentionally fails to comply with reporting or confidentiality and disclosure requirements of this article is subject to a civil penalty of not more than one hundred dollars for a violation the first time a person fails to comply and not more than five thousand dollars for a subsequent violation.