Can criminal charges be brought against the party that created the fake profile?

What consequences should a company face for failing to properly dispose of customer information?

(website https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html).

Can criminal charges be brought against the party that created the fake profile?

Family Educational Rights and Privacy Act of 1974 (FERPA) at ED (ED Link https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html) ,

Discuss who has access to your educational record at APUS. Furthermore, what is the roles and responsibilities for APUS instructors and students to comply with FERPA.