§8–217.

    (a)    (1)    The Attorney General may institute a civil action against a person who violates this part to recover for the State a civil penalty not exceeding $1,000 for each violation.

        (2)    For the purposes of this subsection, each prohibited disclosure or use of a credit card number, payment device number, or holder’s signature is an independent violation.

    (b)    The Attorney General may seek an injunction in a civil action to prohibit a person who has engaged or is engaged in a violation of this part from engaging in the violation.