The federal Fair Credit Reporting Act imposes criminal
penalties-including a fine, up to two years in prison, or both
against anyone who knowingly and willfully obtains information
on a consumer from a consumer reporting agency under false
pretenses, and other penalties for anyone who obtains such
information without a permissible purpose.