; and (ii) organizations that are not organized to carry on business for their own profit or that of their members. (E) Independent litigation authority In any case in which the Commission has reason to believe that a covered entity or data broker is violating or has violated section 2, 3, or 4, the Commission may bring a civil action, subject to subsection (c), to— (i) enjoin any further such violation by such covered entity or data broker; (ii) enforce compliance with this Act, including through deletion of the relevant information; (iii) obtain a permanent, temporary, or preliminary injunction; (iv) obtain civil penalties; (v) obtain damages (whether actual, punitive, or otherwise), restitution, disgorgement of unjust enrichment, or other compensation on behalf of aggrieved persons; or (vi) obtain any other appropriate equitable relief. (F) Civil penalties In addition to any other penalties as may be prescribed by law, a violation of this Act shall carry a civil penalty not to exceed 15 percent of the revenues earned during the preceding 12-month period by the ultimate parent entity of the covered entity or data broker that committed such violation. (b) Private right of action (1) In general Any individual alleging a violation of this Act or a regulation promulgated thereunder may bring a civil action, subject to subsection (c). (2) Relief In a civil action brought under paragraph (1) in which the plaintiff prevails, the court may award— (A) damages in an amount equal to the greater of— (i) actual damages; or (ii) an amount equal to not less than $100 and not more than $1,000 per violation, per day; (B) punitive damages; (C) restitution or other compensation; (D) reasonable attorney’s fees, including litigation expenses, and costs