12 CFR 603.350 - Criminal penalties.
Section 552a (i)(3) of the Privacy Act ( 5 U.S.C. 552a(i)(3)) makes it a misdemeanor, subject to a maximum fine of $5,000, to knowingly and willfully request or obtain any record concerning any individual from an agency under false pretenses. Sections 552a (i) (1) and (2) of the Act ( 5 U.S.C. 552a (i) (1), (2)) provide penalties for violation by agency employees of the Act or regulations established thereunder.