(a) Under 5 U.S.C. 552a(i)(3), any person who knowingly and willfully requests or obtains any record from the Institute concerning an individual under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000.

(b) A person who falsely or fraudulently attempts to obtain records under the Privacy Act also may be subject to prosecution under other statutes, including 18 U.S.C. 494, 495, and 1001.