A merchant who violates this Article or any rule issued by the administrator is subject to the following:
1. After notice and hearing, a cease and desist order and order of restitution from the administrator;
2. A civil action, by the administrator through the Attorney General, after which a court, upon a finding of repeated or willful violations or of violation of an assurance of discontinuance, may assess a civil penalty of not more than $5,000; and
3. A civil action by an aggrieved consumer in which the consumer may recover actual damages or $250, whichever is greater, plus costs of the action and reasonable attorney's fees.