Civil liability for willful noncompliance

any actual damages sustained by the consumer as a result of the failure or damages of not less than $100 and not more than $1,000; or in the case of liability of a natural person for obtaining a consumer report under false pretenses or knowingly without a permissible purpose, actual damages sustained by the consumer as a result of the failure or $1,000, whichever is greater; such amount of punitive damages as the court may allow; and in the case of any successful action to enforce any liability under this section, the costs of the action together with reasonable attorney’s fees as determined by the court. Any person who obtains a consumer report from a consumer reporting agency under false pretenses or knowingly without a permissible purpose shall be liable to the consumer reporting agency for actual damages sustained by the consumer reporting agency or $1,000, whichever is greater. Upon a finding by the court that an unsuccessful pleading, motion, or other paper filed in connection with an action under this section was filed in bad faith or for purposes of harassment, the court shall award to the prevailing party attorney’s fees reasonable in relation to the work expended in responding to the pleading, motion, or other paper. For the purposes of this section, any person who printed an expiration date on any receipt provided to a consumer cardholder at a point of sale or transaction between December 4, 2004, and June 3, 2008, but otherwise complied with the requirements of section 1681c(g) of this title for such receipt shall not be in willful noncompliance with section 1681c(g) of this title by reason of printing such expiration date on the receipt. The Fair and Accurate Credit Transactions Act [of 2003] (commonly referred to as ‘FACTA’) [Pub. L. 108–159, see Short Title of 2003 Amendment note set out under section 1601 of this title] was enacted into law in 2003 and 1 of the purposes of such Act is to prevent criminals from obtaining access to consumers’ private financial and credit information in order to reduce identity theft and credit card fraud. As part of that law, the Congress enacted a requirement, through an amendment to the Fair Credit Reporting Act [15 U.S.C. 1681 et seq.], that no person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the card holder at the point of the sale or transaction. Many merchants understood that this requirement would be satisfied by truncating the account number down to the last 5 digits based in part on the language of the provision as well as the publicity in the aftermath of the passage of the law. Almost immediately after the deadline for compliance passed, hundreds of lawsuits were filed alleging that the failure to remove the expiration date was a willful violation of the Fair Credit Reporting Act even where the account number was properly truncated. None of these lawsuits contained an allegation of harm to any consumer’s identity. Experts in the field agree that proper truncation of the card number, by itself as required by the amendment made by the Fair and Accurate Credit Transactions Act [of 2003], regardless of the inclusion of the expiration date, prevents a potential fraudster from perpetrating identity theft or credit card fraud. Despite repeatedly being denied class certification, the continued appealing and filing of these lawsuits represents a significant burden on the hundreds of companies that have been sued and could well raise prices to consumers without corresponding consumer protection benefit. The purpose of this Act [amending this section and enacting provisions set out as notes under this section and section 1601 of this title] is to ensure that consumers suffering from any actual harm to their credit or identity are protected while simultaneously limiting abusive lawsuits that do not protect consumers but only result in increased cost to business and potentially increased prices to consumers.” Any person who willfully fails to comply with any requirement imposed under this subchapter with respect to any consumer is liable to that consumer in an amount equal to the sum of— The Congress finds as follows: (Source: (Pub. L. 90–321, title VI, § 616, as added Pub. L. 91–508, title VI, § 601, Oct. 26, 1970, 84 Stat. 1134; amended Pub. L. 104–208, div. A, title II, § 2412(a)–(c), (e)(1), Sept. 30, 1996, 110 Stat. 3009–446; Pub. L. 110–241, § 3(a), June 3, 2008, 122 Stat. 1566.))