The IV-D agency shall disclose a person’s financial records obtained from a financial institution only for the purpose of, and to the extent necessary in, establishing, modifying, or enforcing a support obligation of that person. Unauthorized disclosure may result in the awarding of civil damages pursuant to section 469A(c) of the Social Security Act, approved August 22, 1996 (110 Stat. 2105; 42 U.S.C. § 659A(c) ).