(a) Any person or entity that willfully fails to comply with any requirement imposed under this chapter with respect to any consumer is liable to that consumer in an amount equal to the sum of:

(1) Any actual damages sustained by the consumer; and

(2) In the case of any successful action to enforce any liability under this chapter, the costs of the action together with reasonable attorney's fees as determined by the court.

(b) Any person or entity that obtains a credit report, requests a security freeze, or requests the temporary lift of a security freeze or the removal of a security freeze from a consumer reporting agency under false pretenses or in an attempt to violate federal or state law is liable to the consumer reporting agency for actual damages sustained by the consumer reporting agency or one thousand dollars ($1,000), whichever is greater.

(c) Any person or entity that is negligent in failing to comply with any requirement imposed under this chapter with respect to any consumer is liable to that consumer in an amount equal to the sum of:

(1) Any actual damages sustained by the consumer as a result of the failure; and

(2) In the case of any successful action to enforce any liability under this chapter, the costs of the action together with reasonable attorney's fees as determined by the court.

(d) Upon a finding by the court that an unsuccessful pleading, motion, or other paper filed in connection with an action under this chapter was filed in bad faith or for purposes of harassment, the court shall award to the prevailing party reasonable attorney's fees in relation to the work expended in responding to the pleading, motion, or other paper.