Unauthorized disclosures by officers or employees; penalty

N.Y. General Business Law § 380-P, under Fair Credit Reporting Act.

N.Y. General Business Law § 380-P

§ 380-p. Unauthorized disclosures by officers or employees; penalty. Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency's files to a person not authorized to receive that information shall, upon conviction, be fined not more than five thousand dollars or imprisoned not more than one year, or both.