Section 552a(i)(3) of the Privacy Act (5 U.S.C. 552a(i)(3) ) makes it a misdemeanor, subject to a maximum fine of $5,000, to knowingly and willfully request or obtain any record concerning any individual from an agency under false pretenses. Sections 552a(i) (1) and (2) of the Act (5 U.S.C. 552a(i) (1), (2) ) provide penalties for violation by agency employees of the Act or regulations established thereunder.
12 C.F.R. §1403.11