With the faster adoption of strict IT rules and regulations, one can be sued for releasing private information in most states. The penalty largely varies from place to place and also depends on the severity of the information leaked.