12 CFR 603.350 - Criminal penalties.
Section 552a (i)(3) of the Privacy Act (5 U.S.C. 552a(i)(3)) makes it a misdemeanor, subject to a maximum fine of $5,000, to knowingly and willfully request or obtain any record concerning any individual from an agency under false pretenses. Sections 552a (i) (1) and (2) of the Act (5 U.S.C. 552a (i) (1), (2)) provide penalties for violation by agency employees of the Act or regulations established thereunder.