45 CFR § 2508.18 - What are the penalties for obtaining a record under false pretenses?
---
identifier: "/us/cfr/t45/s2508.18"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "45 CFR § 2508.18 - What are the penalties for obtaining a record under false pretenses?"
title_number: 45
title_name: "Public Welfare"
section_number: "2508.18"
section_name: "What are the penalties for obtaining a record under false pretenses?"
chapter_name: "CORPORATION FOR NATIONAL AND COMMUNITY SERVICE"
part_number: "2508"
part_name: "IMPLEMENTATION OF THE PRIVACY ACT OF 1974"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "5 U.S.C. 552a; 42 U.S.C. 12501 42 U.S.C. 4950"
regulatory_source: "64 FR 19294, Apr. 20, 1999, unless otherwise noted."
cfr_part: "2508"
---
# 2508.18 What are the penalties for obtaining a record under false pretenses?
The Privacy Act provides, in pertinent part that:
(a) Any person who knowingly and willfully requests to obtain any record concerning an individual from the Corporation under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000 (5 U.S.C. 552a(I)(3)).
(b) A person who falsely or fraudulently attempts to obtain records under the Privacy Act also may be subject to prosecution under such other criminal statutes as 18 U.S.C. 494, 495 and 1001.