Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency's files to a person not authorized to receive that information shall, upon conviction, be fined not more than five thousand dollars or imprisoned not more than one year, or both.
New York Legal Code