Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency’s files to a person not authorized to receive that information shall be fined under title 18, imprisoned for not more than 2 years, or both.
15 U.S. Code § 1681r - Unauthorized disclosures by officers or employees
1996—Pub. L. 104–208 substituted “fined under title 18, imprisoned for not more than 2 years, or both” for “fined not more than $5,000 or imprisoned not more than one year, or both”.
Effective Date of 1996 Amendment