Criminal penalties.

Criminal penalties.
(1) The Privacy Act imposes criminal penalties on the conduct of Government officers or employees as follows: Any officer or employee of an agency (which term includes the Department of the Treasury):
(i) Who by virtue of the official's employment or official position, has possession of, or access to, agency records which contain individually identifiable information the disclosure of which is prohibited by this section (5 U.S.C. 552a) or regulations established thereunder, and who knowing that disclosure of the specific material is so prohibited, willfully discloses the material in any manner to any person or agency not entitled to receive it, or
(ii) Who willfully maintains a system of records without meeting the notice requirements of paragraph (e)(4) of this section (5 U.S.C. 552a) - shall be guilty of a misdemeanor and fined not more than $5,000.
(2) The Act also imposes a collateral criminal penalty on the conduct of any person as follows:
(1) The Privacy Act imposes criminal penalties on the conduct of Government officers or employees as follows: Any officer or employee of an agency (which term includes the Department of the Treasury):
(i) Who by virtue of the official's employment or official position, has possession of, or access to, agency records which contain individually identifiable information the disclosure of which is prohibited by this section (5 U.S.C. 552a) or regulations established thereunder, and who knowing that disclosure of the specific material is so prohibited, willfully discloses the material in any manner to any person or agency not entitled to receive it, or
(ii) Who willfully maintains a system of records without meeting the notice requirements of paragraph (e)(4) of this section (5 U.S.C. 552a) - shall be guilty of a misdemeanor and fined not more than $5,000.
(2) The Act also imposes a collateral criminal penalty on the conduct of any person as follows:

Source

31 CFR § 1.28


Scoping language

Training. Subject to policy guidance and regulations issued by the Deputy Secretary, who has Departmentwide responsibility therefor, each component shall institute a training program to instruct employees and employees of Government contractors covered by 5 U.S.C. 552a(m), who are involved in the design, development, operation or maintenance of any system of records, on a continuing basis with respect to the duties and responsibilities imposed on them and the rights conferred on individuals by the Privacy Act, the regulations in this subpart, including the appendices thereto, and any other related regulations. Such training shall provide suitable emphasis on the civil and criminal penalties imposed on the Department and the individual employees by the Privacy Act for non-compliance with specified requirements of the Act as implemented by the regulations in this subpart. (See 5 U.S.C. 552a(e)(9))

Is this correct? or