32 C.F.R. § 806b.3 Violation penalties.
Title 32 - National Defense
An individual may file a civil law suit against the Air Force for failing to comply with the Privacy Act. The courts may find an individual offender guilty of a misdemeanor and fine that individual offender not more than $5,000 for: (a) Willfully maintaining a system of records that doesn't meet the public notice requirements. (b) Disclosing information from a system of records to someone not entitled to the information. (c) Obtaining someone else's records under false pretenses.
Title 32: National Defense
PART 806b—PRIVACY ACT PROGRAM
Subpart A—Overview of the Privacy Act Program
§ 806b.3 Violation penalties.

