A company who recently learned of a person trying to obtain personal information employees illegally. According to which act will be the person punished?