(1) Any covered platform or third party that performs the age verification required under KRS 436.002 shall not retain any identifying information of the individual after access has been granted to the matter.
(2) A covered platform or third party that is found to have knowingly retained identifying information of the individual after access has been granted to the matter shall be liable to the individual for:
(a) Damages of one thousand dollars ($1,000) for each twenty-four (24) hour period that the information is retained; and (b) Actual damages, court costs, and reasonable attorney's fees.