; or (2) if done intentionally, shall be fined not more than $5,000,000 or imprisoned not more than 20 years or both. (d) Penalties for failure To comply Any individual who fails to certify and submit a required attestation described under subsection (a), shall be fined not more than $1,000,000 or imprisoned not more than 10 years or both. 302. Personal liability of executive officers and directors of the board for Federal consumer protection law violations (a) Civil liability (1) In general If an executive officer or director of the board of a national bank, Federal savings association, or federally insured State depository institution affiliated with a global systemically important bank holding company, or United States branch, agency, commercial lending company, or representative office of a foreign bank affiliated with a global systemically important bank holding company, knowingly violates any Federal consumer protection law (or directs any of the agents, officers, or directors of the institution to so violate or engage), such executive officer or director shall be liable in their personal and individual capacity for damages which the institution or any other person shall have sustained in consequence of such violation or engagement. Any fines under this subsection shall not be deemed to limit the relevant Federal regulator or law enforcement entity’s authority to impose civil penalties, fines, or other appropriate consumer redress on the institution. (2) Limitation on actions Except as otherwise provided by law, a civil action arising under this section may not be commenced after the later of— (A) 2 years after the discovery of the facts constituting the violation