12 CFR 310.12 - Penalties.
Subsection (i)(3) of the Privacy Act of 1974 (5 U.S.C. 552a(i)(3)) imposes criminal penalties for obtaining Corporation records on individuals under false pretenses. The subsection provides as follows:
Any person who knowingly and willfully requests or obtains any record concerning an individual from an agency under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000.