Class 1 misdemeanor – up to 1 year in jail and/or fine up to $2,500; OR
Class 6 felony – up to 5 years in jail and/or fine up to $2,500.
§ 18.2-152.5. Computer invasion of privacy; penalties.
A. A person is guilty of the crime of computer invasion of privacy when he uses a computer or computer network and intentionally examines without authority any employment, salary, credit or any other financial or identifying information, as defined in clauses (iii) through (xiii) of subsection C of § 18.2-186.3, relating to any other person. “Examination” under this section requires the offender to review the information relating to any other person after the time at which the offender knows or should know that he is without authority to view the information displayed.
B. The crime of computer invasion of privacy shall be punishable as a Class 1 misdemeanor.
C. Any person who violates this section after having been previously convicted of a violation of this section or any substantially similar laws of any other state or of the United States is guilty of a Class 6 felony.
D. Any person who violates this section and sells or distributes such information to another is guilty of a Class 6 felony.
E. Any person who violates this section and uses such information in the commission of another crime is guilty of a Class 6 felony.
F. This section shall not apply to any person collecting information that is reasonably needed to (i) protect the security of a computer, computer service, or computer business, or to facilitate diagnostics or repair in connection with such computer, computer service, or computer business or (ii) determine whether the computer user is licensed or authorized to use specific computer software or a specific computer service.