§ 380-m. Civil liability for negligent noncompliance. Any consumer
reporting agency or user of information who or which is negligent in
failing to comply with any requirement imposed under this article, other
than a violation of section three hundred eighty-t of this article, with
respect to any consumer is liable to that consumer in an amount equal to
the sum of:

(a) Any actual damages sustained by the consumer as a result of the
failure;

(b) In the case of any successful action to enforce any liability
under this section, the costs of the action together with reasonable
attorney's fees as determined by the court.