Section 620 provides criminal sanctions against any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency's file to a person not authorized to receive it.