Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency’s files to a person not authorized to receive that information shall be fined under title 18, imprisoned for not more than 2 years, or both.

(Pub. L. 90–321, title VI, § 620, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1134; amended Pub. L. 104–208, div. A, title II, § 2415(b), Sept. 30, 1996, 110 Stat. 3009–450.)