Any individual aggrieved by a violation of this chapter, including the loss or misuse of biometric data lawfully collected under RSA 359-N:2 or 359-N:3, may bring a civil action against a government agency under this section to obtain the following:
I. An injunction of the agency practice;
II. Actual damages or $2,500 for each violation, whichever is greater; and
III. Reasonable attorney's fees and court costs.