The Privacy Act of 1974 (5 U.S.C. 552a(i)(3)) makes it a misdemeanor subject to a maximum fine of $5,000, to knowingly and willfully request or obtain any record concerning an individual under false pretenses. The Act also establishes similar penalties for violations by NGA employees of the Act or regulations established thereunder.