Section 51-33-13 - Private enforcement1. If a consumer reporting agency erroneously releases a consumer's credit file or any information derived from the file, the consumer reporting agency shall send written notification to the affected consumer within five business days following discovery or notification of the erroneous release, including specificity as to the information released and the third-party recipient of the information. In addition, the affected consumer in a civil action against the consumer reporting agency may recover: a. Injunctive relief to prevent or restrain further violation of the security freeze;b. The greater of actual damages or two thousand dollars in civil penalties for each violation; andc. Reasonable expenses, court costs, investigative costs, and attorney's fees.2. Each violation of the security freeze shall be counted as a separate incident for purposes of imposing penalties under this section.