Ohio Code § 1349.53

§ 1349.53.

(A) If a consumer credit reporting agency willfully fails to comply with division (C) or (J) of section 1349.52 of the Revised Code , the consumer may file a civil action against the consumer credit reporting agency.  In the civil action, the consumer may recover all of the following: (1) Actual damages sustained by the consumer as a result of the consumer credit reporting

agency's failure to comply with division (C) or (J) of section 1349.52 of the Revised Code or damages of not less than one hundred dollars and not more than one thousand dollars,

whichever is greater; (2) Punitive damages; (3) Court costs and reasonable attorney's fees. (B) A person who obtains a consumer's credit report from a consumer credit reporting

agency under false pretenses or knowingly without the permission of the consumer is

liable to the consumer credit reporting agency for actual damages sustained by the

consumer credit reporting agency or one thousand dollars, whichever is greater. (C) If a consumer credit reporting agency negligently fails to comply with division (C) or (J) of section 1349.52 of the Revised Code , the consumer may file a civil action against the consumer credit reporting agency.  In the civil action, the consumer may recover all of the following: (1) Actual damages sustained by the consumer as a result of the consumer credit reporting

agency's failure to comply with division (C) or (J) of section 1349.52 of the Revised Code or as a result of the consumer credit reporting agency negligently allowing another

person to obtain a consumer's credit report; (2) Court costs and reasonable attorney's fees. (D) If the court finds that a civil action under division (A) or (C) of this section

was brought in bad faith or for the purposes of harassment, the court shall award

to the prevailing party reasonable attorney's fees in relation to the work expended

in responding to the civil action. (E) A person shall bring a civil action under division (A) or (C) of this section not

later than the earlier of the following: (1) Two years after the date of discovery by the plaintiff of a violation of division (C) or (J) of section 1349.52 of the Revised Code ; (2) Five years after the date a violation of division (C) or (J) of section 1349.52 of the Revised Code occurs. (F) A consumer credit reporting agency is not liable in damages in a civil action brought

pursuant to division (A) of this section for any damages a consumer allegedly sustains

as a result of the consumer credit reporting agency's placement of a security freeze

in violation of division (C) of section 1349.52 of the Revised Code on the consumer's credit report if the consumer credit reporting agency establishes

as an affirmative defense that the consumer credit reporting agency made a good faith

effort to comply with that division and the consumer credit reporting agency placed

a security freeze on the consumer's credit report as a result of a misrepresentation

of fact by another consumer.