15 USC 1681r - Unauthorized disclosures by officers or employees

Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agencys files to a person not authorized to receive that information shall be fined under title 18, imprisoned for not more than 2 years, or both.