Sec. 205. Supplemental enforcement by individuals

319 words·~1 min read·/bill/113/s/1995/is/section-205

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Any person aggrieved by a violation of the provisions of this subtitle by a business entity may bring a civil action in a court of appropriate jurisdiction to recover for personal injuries sustained as a result of the violation. As provided in subsection (c), any person may commence a civil action on his own behalf against any business entity who is alleged to have violated the provisions of this subtitle. Any individual harmed by a failure of a business entity to comply with the provisions of this subtitle, shall be able to collect damages of not more than $10,000 per violation per day while such violations persist, up to a maximum of $20,000,000 per violation.

A business entity may be liable for punitive damages if the business entity intentionally or willfully violates the provisions of this subtitle. A business entity that violates the provisions of this subtitle may be enjoined to comply with the provisions of those sections. The rights and remedies available under this subsection are cumulative and shall not affect any other rights and remedies available under law. The rights and remedies provided for in this section may not be waived by any agreement, policy form, or condition of employment including by a predispute arbitration agreement.

No predispute arbitration agreement shall be valid or enforceable, if the agreement requires arbitration of a dispute arising under this section. In determining the amount of a civil penalty under this subsection, the court shall take into account— the degree of culpability of the business entity; any prior violations of this subtitle by the business entity; the ability of the business entity to pay a civil penalty; the effect on the ability of the business entity to continue to do business; the number of individuals whose sensitive personally identifiable information was compromised by the breach; the relative cost of compliance with this subtitle; and such other matters as justice may require.