The Privacy Act provides, in pertinent part that:

(a) Any person who knowingly and willfully requests to obtain any record concerning an individual from the Corporation under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000 (5 U.S.C. 552a(I)(3)).

(b) A person who falsely or fraudulently attempts to obtain records under the Privacy Act also may be subject to prosecution under such other criminal statutes as 18 U.S.C. 494,495.