(1)
(a) A person whose personal information is recklessly provided or disclosed by a public agency in violation of this chapter may bring a civil action for appropriate injunctive relief, damages, or both.
(b) When a court awards damages under this section, the court shall order:
(i) an amount of not less than $2,500 to compensate for injury or loss caused by each violation of this chapter; or
(ii) for an intentional violation of this chapter, an amount not to exceed three times the amount described in Subsection (1)(b)(i).
(2) A court may award court costs and attorney fees to a person that brings an action described in Subsection (1) if the person prevails in that action.
(3) A person that knowingly violates a provision of Section 63G-26-103 is guilty of a class C misdemeanor, punishable by imprisonment for not more than 90 days or a fine of not more than $1,000, or both.