Divulging information on the patient’s illness or the results of medical tests, by the medical personnel, without professional or official need, is punished with a fine in the amount of 200 to 500, or by deprivation of the right to hold certain posts or practice certain activities from 2 to 5 years, or with arrest for the term of 1 to 2 months.
Actions if they caused grave consequences by negligence are punished with imprisonment for up to 4 years, with deprivation of the right to hold certain posts or practice certain activities for up to 3 years or without that.

Source: Iravaban.net