years after the date of discovery of the violation to which the action relates. 404. Enforcement by States (a) Civil action In any case in which a State attorney general or a State privacy regulator has reason to believe that an interest of the residents of a State has been or is adversely affected by any person who violates any provision of this Act or a rule or order prescribed under this Act, the State attorney general or State privacy regulator, as parens patriae, may bring a civil action on behalf of the residents of the State in an appropriate State court or an appropriate district court of the United States to— (1) enjoin further violation of such provision by the defendant