(a) General. (1) Any Person certified under this part who receives DMF including information about any deceased individual at any time during the three-calendar-year period beginning on the date of the individual's death, and who during such three-calendar-year period:
(1) Any Person certified under this part who receives DMF including information about any deceased individual at any time during the three-calendar-year period beginning on the date of the individual's death, and who during such three-calendar-year period:
(i) Discloses such deceased individual's DMF information to any person other than a person who meets the requirements of Sec. 1110.102(a)(1) through (3);
(ii) Discloses such deceased individual's DMF to any person who uses the information for any purpose other than a legitimate fraud prevention interest or a legitimate business purpose pursuant to a law, governmental rule, regulation, or fiduciary duty;
(iii) Discloses such deceased individual's DMF to any person who further discloses the information to any person other than a person who meets the requirements of Sec. 1110.102(a)(1) through (3); or
(iv) Uses any such deceased individual's DMF for any purpose other than a legitimate fraud prevention interest or a legitimate business purpose pursuant to a law, governmental rule, regulation, or fiduciary duty
(2) Any Person to whom such information is disclosed, whether or not such Person is certified under this part, who further discloses or uses such information as described in paragraphs (a)(1)(i) through (iv) of this section shall pay to the General Fund of the United States Department of the Treasury a penalty of $1,000 for each such disclosure or use.
(b) Limitation on Penalty. The total amount of the penalty imposed under this part on any Person for any calendar year shall not exceed $250,000.