The Privacy Act provides, in pertinent part that:

(a) Any person who knowingly and willfully requests to obtain any record concerning an individual from the Corporation under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000 (5 U.S.C. 552a(I)(3)).

(b) A person who falsely or fraudulently attempts to obtain records under the Privacy Act also may be subject to prosecution under such other criminal statutes as 18 U.S.C. 494, 495 and 1001.