the at-risk individual’s judges’ personally identifiable information is not made available on any website or subsidiary website controlled by that person, business, or association. (C) Transfer After receiving an at-risk individual’s written request, no person, business, or association shall transfer the judges’ personally identifiable information to any other person, business, or association through any medium. (d) Redress and penalties (1) In general An at-risk individual whose judges' personally identifiable information is made public as a result of a violation of this Act may bring an action seeking injunctive or declaratory relief in any court of competent jurisdiction. If the court grants injunctive or declaratory relief, the person, business, or association responsible for the violation shall be required to pay the at-risk individual’s costs and reasonable attorney's fees. (2) Private right of action (A) In general An at-risk individual or immediate family member who is aggrieved by a violation of subsection (c) of this section may bring an action in any court of competent jurisdiction. (B) Damages A prevailing plaintiff in an action described in subparagraph (A) shall be awarded damages in an amount— (i) not greater than 3 times the actual damages to the plaintiff