If a violation is not cured within the 30-day period, the Attorney General may bring an action and the court may impose: actual damages to consumers; and an amount not to exceed $7,500 for each violation. Penalties are paid into a Consumer Privacy Account. The cap on penalty per violation is significantly higher than CCPA per-violation amounts but lacks the per-record multiplier seen elsewhere.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.