Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency’s files to a person not authorized to receive that information is guilty of a severity level 7, person felony and upon conviction shall be punished in the manner provided by law.