§1349.__Enforcement; penalties

1.__Enforcement.__The Department of Professional and Financial Regulation, Office of Consumer Credit Regulation is responsible for enforcement of this chapter.

2.__Civil violation.__A business that violates this chapter commits a civil violation and is subject to the following:

A.__A fine of not more than $5,000 per violation, up to a maximum of $25,000 per each day the business is in violation of this chapter;

B.__Equitable relief; or

C.__Enjoinment from further violations of this chapter.

3.__Other rights and remedies.__In addition to a civil penalty assessed or relief provided pursuant to subsection 2, a subject person injured by a violation of this chapter may bring a civil action against the business to recover damages.

4.__Cumulative effect.__The rights and remedies available under this section are cumulative and do not affect or prevent rights and remedies available under federal or state law.

SUMMARY

This bill requires an entity engaged in business in Maine that is in possession of electronic data containing personal information to disclose any unauthorized acquisition or suspected unauthorized acquisition of that personal information to a person whose personal information may have been acquired.