No person, medical facility, or other organization providing or releasing information in accordance with this article may be held liable in a civil or criminal action for divulging confidential information unless the individual or organization acted in bad faith or with malicious purpose.