(a) A data broker that violates § 509.004 or 509.005 is liable to this state for a civil penalty as prescribed by this section.
(b) A civil penalty imposed against a data broker under this section:
(1) subject to Subdivision (2), may not be in an amount less than the total of:
(A) $100 for each day the entity is in violation of § 509.004 or 509.005; and
(B) the amount of unpaid registration fees for each year the entity failed to register in violation of § 509.005; and
(2) may not exceed $10,000 assessed against the same data broker in a 12-month period.

(c) The attorney general may bring an action to recover a civil penalty imposed under this section. The attorney general may recover reasonable attorney’s fees and court costs incurred in bringing the action.