(2) EMPLOYEE DISCIPLINE. Any person employed by an authority who violates this subchapter may be discharged or suspended without pay.
(3) PENALTIES.
(a) Any person who willfully collects, discloses or maintains personally identifiable information in violation of federal or state law may be required to forfeit not more than $500 for each violation.
(b) Any person who willfully requests or obtains personally identifiable information from an authority under false pretenses may be required to forfeit not more than $500 for each violation.