N.Y. Gen. Bus. Law § 380-p

§ 380-p. Unauthorized disclosures by officers or employees; penalty.\nAny officer or employee of a consumer reporting agency who knowingly and\nwillfully provides information concerning an individual from the\nagency's files to a person not authorized to receive that information\nshall, upon conviction, be fined not more than five thousand dollars or\nimprisoned not more than one year, or both.\n