Any person who willfully fails to comply with any requirement imposed under this subchapter with respect to any consumer is liable to that consumer in an amount equal to the sum of—
(1)(A) any actual damages sustained by the consumer as a result of the failure or damages of not less than $100 and not more than $1,000; or
(B) in the case of liability of a natural person for obtaining a consumer report under false pretenses or knowingly without a permissible purpose, actual damages sustained by the consumer as a result of the failure or $1,000, whichever is greater;
(2) such amount of punitive damages as the court may allow; and
(3) in the case of any successful action to enforce any liability under this section, the costs of the action together with reasonable attorney's fees as determined by the court.
Any person who obtains a consumer report from a consumer reporting agency under false pretenses or knowingly without a permissible purpose shall be liable to the consumer reporting agency for actual damages sustained by the consumer reporting agency or $1,000, whichever is greater.
Upon a finding by the court that an unsuccessful pleading, motion, or other paper filed in connection with an action under this section was filed in bad faith or for purposes of harassment, the court shall award to the prevailing party attorney's fees reasonable in relation to the work expended in responding to the pleading, motion, or other paper.
For the purposes of this section, any person who printed an expiration date on any receipt provided to a consumer cardholder at a point of sale or transaction between December 4, 2004, and June 3, 2008, but otherwise complied with the requirements of section 1681c(g) of this title for such receipt shall not be in willful noncompliance with section 1681c(g) of this title by reason of printing such expiration date on the receipt.
(Pub. L. 90–321, title VI, §616, as added Pub. L. 91–508, title VI, §601, Oct. 26, 1970, 84 Stat. 1134; amended Pub. L. 104–208, div. A, title II, §2412(a)–(c), (e)(1), Sept. 30, 1996, 110 Stat. 3009–446; Pub. L. 110–241, §3(a), June 3, 2008, 122 Stat. 1566.)
2008—Subsec. (d). Pub. L. 110–241 added subsec. (d).
1996—Subsec. (a). Pub. L. 104–208, §2412(a), designated existing provisions as subsec. (a), inserted heading, and in introductory provisions substituted “Any person who” for “Any consumer reporting agency or user of information which”.
Subsec. (a)(1). Pub. L. 104–208, §2412(b), amended par. (1) generally. Prior to amendment, par. (1) read as follows: “any actual damages sustained by the consumer as a result of the failure;”.
Subsec. (b). Pub. L. 104–208, §2412(c), added subsec. (b).
Subsec. (c). Pub. L. 104–208, §2412(e)(1), added subsec. (c).
Amendment by Pub. L. 104–208 effective 365 days after Sept. 30, 1996, with special rule for early compliance, see section 2420 of Pub. L. 104–208, set out as a note under section 1681a of this title.
Pub. L. 108–159, title III, §312(f), Dec. 4, 2003, 117 Stat. 1993, provided that: “Nothing in this section, the amendments made by this section, or any other provision of this Act [see Short Title of 2003 Amendment note set out under section 1601 of this title] shall be construed to affect any liability under section 616 or 617 of the Fair Credit Reporting Act (15 U.S.C. 1681n, 1681o) that existed on the day before the date of enactment of this Act [Dec. 4, 2003].”
Pub. L. 110–241, §2, June 3, 2008, 122 Stat. 1565, provided that:
“(1) The Fair and Accurate Credit Transactions Act [of 2003] (commonly referred to as ‘FACTA’) [Pub. L. 108–159, see Short Title of 2003 Amendment note set out under section 1601 of this title] was enacted into law in 2003 and 1 of the purposes of such Act is to prevent criminals from obtaining access to consumers’ private financial and credit information in order to reduce identity theft and credit card fraud.
“(2) As part of that law, the Congress enacted a requirement, through an amendment to the Fair Credit Reporting Act [15 U.S.C. 1681 et seq.], that no person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the card holder at the point of the sale or transaction.
“(3) Many merchants understood that this requirement would be satisfied by truncating the account number down to the last 5 digits based in part on the language of the provision as well as the publicity in the aftermath of the passage of the law.
“(4) Almost immediately after the deadline for compliance passed, hundreds of lawsuits were filed alleging that the failure to remove the expiration date was a willful violation of the Fair Credit Reporting Act even where the account number was properly truncated.
“(5) None of these lawsuits contained an allegation of harm to any consumer's identity.
“(6) Experts in the field agree that proper truncation of the card number, by itself as required by the amendment made by the Fair and Accurate Credit Transactions Act [of 2003], regardless of the inclusion of the expiration date, prevents a potential fraudster from perpetrating identity theft or credit card fraud.
“(7) Despite repeatedly being denied class certification, the continued appealing and filing of these lawsuits represents a significant burden on the hundreds of companies that have been sued and could well raise prices to consumers without corresponding consumer protection benefit.
Pub. L. 110–241, §3(b), June 3, 2008, 122 Stat. 1566, provided that: “The amendment made by subsection (a) [amending this section] shall apply to any action, other than an action which has become final, that is brought for a violation of [section] 605(g) of the Fair Credit Reporting Act [15 U.S.C. 1681c(g)] to which such amendment applies without regard to whether such action is brought before or after the date of the enactment of this Act [June 3, 2008].”