10 C.F.R. § 1008.19
Criminal penalties—improper disclosure
Subsection (i)(1) of the Act provides that a Federal employee who willfully discloses information subject to the Privacy Act in violation of the Act or rules promulgated under it shall be guilty of a misdemeanor and fined up to $5,000.