(1) A person commits the offense of unauthorized disclosure of electronic funds transfer records if the person has lawful access to the records by virtue of office or employment and:
(a) permits another, who lacks lawful access to the records, to inspect, copy, or read the records; or
(b) transfers the records to another who lacks lawful access to the records.
(2) A person convicted of the offense of unauthorized disclosure of electronic funds transfer records shall be imprisoned in the state prison for any term not to exceed 1 year, be fined not more than $5,000, or be punished by both imprisonment and fine.