Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency’s files to a person not authorized to receive that information shall be fined not more than $5,000 or imprisoned not more than one year or both.
Md. Code Ann., Com. Law § 14-1224
Official source: Maryland General Assembly. Reproduced from public-domain Maryland statutes; confirm against the official source for the current text. Not legal advice.