The Federal Trade Commission shall be authorized to enforce compliance with the requirements imposed by this subchapter under the Federal Trade Commission Act (15 U.S.C. 41 et seq.), with respect to consumer reporting agencies and all other persons subject thereto, except to the extent that enforcement of the requirements imposed under this subchapter is specifically committed to some other Government agency under any of subparagraphs (A) through (G) of subsection (b)(1), and subject to subtitle B of the Consumer Financial Protection Act of 2010 [12 U.S.C. 5511 et seq.], subsection (b).[1] For the purpose of the exercise by the Federal Trade Commission of its functions and powers under the Federal Trade Commission Act, a violation of any requirement or prohibition imposed under this subchapter shall constitute an unfair or deceptive act or practice in commerce, in violation of section 5(a) of the Federal Trade Commission Act (15 U.S.C. 45(a)), and shall be subject to enforcement by the Federal Trade Commission under section 5(b) of that Act [15 U.S.C. 45(b)] with respect to any consumer reporting agency or person that is subject to enforcement by the Federal Trade Commission pursuant to this subsection, irrespective of whether that person is engaged in commerce or meets any other jurisdictional tests under the Federal Trade Commission Act. The Federal Trade Commission shall have such procedural, investigative, and enforcement powers, including the power to issue procedural rules in enforcing compliance with the requirements imposed under this subchapter and to require the filing of reports, the production of documents, and the appearance of witnesses, as though the applicable terms and conditions of the Federal Trade Commission Act were part of this subchapter. Any person violating any of the provisions of this subchapter shall be subject to the penalties and entitled to the privileges and immunities provided in the Federal Trade Commission Act as though the applicable terms and provisions of such Act are part of this subchapter.
Except as otherwise provided by subtitle B of the Consumer Financial Protection Act of 2010, in the event of a knowing violation, which constitutes a pattern or practice of violations of this subchapter, the Federal Trade Commission may commence a civil action to recover a civil penalty in a district court of the United States against any person that violates this subchapter. In such action, such person shall be liable for a civil penalty of not more than $2,500 per violation.
In determining the amount of a civil penalty under subparagraph (A), the court shall take into account the degree of culpability, any history of such prior conduct, ability to pay, effect on ability to continue to do business, and such other matters as justice may require.
Notwithstanding paragraph (2), a court may not impose any civil penalty on a person for a violation of section 1681s–2(a)(1) of this title, unless the person has been enjoined from committing the violation, or ordered not to commit the violation, in an action or proceeding brought by or on behalf of the Federal Trade Commission, and has violated the injunction or order, and the court may not impose any civil penalty for any violation occurring before the date of the violation of the injunction or order.
The terms used in paragraph (1) that are not defined in this subchapter or otherwise defined in section 3(s) of the Federal Deposit Insurance Act (12 U.S.C. 1813(s)) have the same meanings as in section 1(b) of the International Banking Act of 1978 (12 U.S.C. 3101).
For purposes of bringing any action under this subsection, nothing in this subsection shall prevent the chief law enforcement officer, or an official or agency designated by a State, from exercising the powers conferred on the chief law enforcement officer or such official by the laws of such State to conduct investigations or to administer oaths or affirmations or to compel the attendance of witnesses or the production of documentary and other evidence.
If the Bureau, the Federal Trade Commission, or the appropriate Federal regulator has instituted a civil action or an administrative action under section 8 of the Federal Deposit Insurance Act [12 U.S.C. 1818] for a violation of this subchapter, no State may, during the pendency of such action, bring an action under this section against any defendant named in the complaint of the Bureau, the Federal Trade Commission, or the appropriate Federal regulator for any violation of this subchapter that is alleged in that complaint.
In an action against a person under paragraph (1)(B) for a violation described in any of paragraphs (1) through (3) of section 1681s–2(c) of this title, a State may not recover any damages incurred before the date of the violation of an injunction on which the action is based.
For the purpose of the exercise by any agency referred to in subsection (b) of its powers under any Act referred to in that subsection, a violation of any requirement imposed under this subchapter shall be deemed to be a violation of a requirement imposed under that Act. In addition to its powers under any provision of law specifically referred to in subsection (b), each of the agencies referred to in that subsection may exercise, for the purpose of enforcing compliance with any requirement imposed under this subchapter any other authority conferred on it by law.
The Bureau shall prescribe such regulations as are necessary to carry out the purposes of this subchapter, except with respect to sections 1681m(e) and 1681w of this title. The Bureau may prescribe regulations as may be necessary or appropriate to administer and carry out the purposes and objectives of this subchapter, and to prevent evasions thereof or to facilitate compliance therewith. Except as provided in section 1029(a) of the Consumer Financial Protection Act of 2010 [12 U.S.C. 5519(a)], the regulations prescribed by the Bureau under this subchapter shall apply to any person that is subject to this subchapter, notwithstanding the enforcement authorities granted to other agencies under this section.
Notwithstanding any power granted to any Federal agency under this subchapter, the deference that a court affords to a Federal agency with respect to a determination made by such agency relating to the meaning or interpretation of any provision of this subchapter that is subject to the jurisdiction of such agency shall be applied as if that agency were the only agency authorized to apply, enforce, interpret, or administer the provisions of this subchapter [2] The regulations prescribed by the Bureau under this subchapter shall apply to any person that is subject to this subchapter, notwithstanding the enforcement authorities granted to other agencies under this section.
Each consumer reporting agency described in section 1681a(p) of this title shall develop and maintain procedures for the referral to each other such agency of any consumer complaint received by the agency alleging identity theft, or requesting a fraud alert under section 1681c–1 of this title or a block under section 1681c–2 of this title.
The Commission,[3] in consultation with the Federal Trade Commission, the Federal banking agencies, and the National Credit Union Administration, shall develop a model form and model procedures to be used by consumers who are victims of identity theft for contacting and informing creditors and consumer reporting agencies of the fraud.
Each consumer reporting agency described in section 1681a(p) of this title shall submit an annual summary report to the Bureau on consumer complaints received by the agency on identity theft or fraud alerts.
If the Bureau determines that a person described in paragraph (9) of section 1681s–2(a) of this title has not met the requirements of such paragraph, the Bureau shall take action to ensure the person’s compliance with such paragraph, which may include issuing model guidance or prescribing reasonable policies and procedures, as necessary to ensure that such person complies with such paragraph.