§ 10-16I-4 NMSA 1978

The attorney general, a district attorney and the state ethics commission may institute a civil action in district court if a violation has occurred or to prevent a violation of the Nondisclosure of Sensitive Personal Information Act. Penalties for a violation of that act shall be a civil penalty of two hundred fifty dollars ($250) for each violation, but not to exceed five thousand dollars ($5,000).