; (B) a background check of the individual conducted by a landlord, lessor, employer, or voluntary service agency; (C) law enforcement; or (D) a Federal, State, or local law requirement; or (2) if the social security account number is necessary to verify the identity of the consumer to effect, administer, or enforce the specific transaction requested or authorized by the consumer, or to prevent fraud. (b) Purging of collected social security account numbers A commercial entity that has acquired social security account numbers prior to the enactment of this Act is prohibited from intentional continued possession of such social security account numbers and must purge all such social security account numbers from its records not later than 180 days after the effective date of this Act, unless the commercial entity would qualify for an exception under subsection (a). (c) Limitation on predispute arbitration agreements No predispute arbitration agreement shall be valid or enforceable if it requires arbitration of a violation of this section. (d) State attorney general enforcement In any case in which the attorney general of a State has reason to believe that an interest of the residents of that State has been or is threatened or adversely affected by the engagement of any person in a practice that is prohibited under this section, the State, as parens patriae, may bring a civil action on behalf of the residents of the State in a district court of the United States of appropriate jurisdiction to— (1) enjoin that practice; (2) enforce compliance with such section; (3) obtain damages, restitution, or other compensation on behalf of residents of the State; or (4) obtain such other relief as the court may consider appropriate. 3. Civil actions and civil penalties (a) Civil action in state courts (1) Statute of limitations An action may be commenced under this subsection not later than the earlier of— (A) 5 years after the date on which the alleged violation occurred