Disclosure of Agency records which contain individually identifiable information is prohibited. Any office or employee of the Agency, who by virtue of his/her official position, has possession of, or access to, Agency records which contain personal data subject to the Privacy Act who willfully discloses it in any manner to any person or agency NOT entitled to receive it, shall be quality of misdemeanor and fined not more than $5,000.
(5U.S.C. 552a(l)(1))

Any employee who willfully maintains a system of records without meeting the Notice Requirements of Subsection (e)(4) of the Privacy Act shall be guilty of a misdemeanor And fined not more than $5,000.
(5U.S.C. 552a(l)(2))

Any person who knowingly and willfully requests or obtains any record concerning an Individual from an agency under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000.
(5U.S.C. 552a(l)(3))

No record which is contained in a system of records may be disclosed to a recipient Agency or non-Federal agency for use in a computer manager program except Pursuant to a written agreement between the source agency and the recipient agency of non-Federal agency.