Health & Saf. Code, § 11362.81

(a) A person specified in subdivision (b) shall be subject to the following penalties:

(1) For the first offense, imprisonment in the county jail for no more than six months or a fine not to exceed one thousand dollars ($1,000), or both.

(2) For a second or subsequent offense, imprisonment in the county jail for no more than one year, or a fine not to exceed one thousand dollars ($1,000), or both.

(b) Subdivision (a) applies to any of the following:

(1) A person who fraudulently represents a medical condition or fraudulently provides any material misinformation to a physician, county health department or the county’s designee, or state or local law enforcement agency or officer, for the purpose of falsely obtaining an identification card.

(2) A person who steals or fraudulently uses any person’s identification card in order to acquire, possess, cultivate, transport, use, produce, or distribute cannabis.

(3) A person who counterfeits, tampers with, or fraudulently produces an identification card.

(4) A person who breaches the confidentiality requirements of this article to information provided to, or contained in the records of, the department or of a county health department or the county’s designee pertaining to an identification card program.

(c) In addition to the penalties prescribed in subdivision (a), a person described in subdivision (b) may be precluded from attempting to obtain, or obtaining or using, an identification card for a period of up to six months at the discretion of the court.

(d) In addition to the requirements of this article, the Attorney General shall develop and adopt appropriate guidelines to ensure the security and nondiversion of cannabis grown for medicinal use by patients qualified under the Compassionate Use Act of 1996.