Earlier quoted context omitted.
It is a crime under 5 USC 552a(i)(3) https://www.law.cornell.edu/uscode/text/5/552a : > Any person who knowingly and willfully requests or obtains any record concerning an individual from an agency under false pretenses shall be guilty of a misdemeanor and fined not more than $5,000.
5,000$ USD might be worth it for a paparazzo or other neerdewel.
I'm more worried that if there is no way to get caught, people won't care about the criminal penalties no matter how heavy.