California Codes, Civil Code - CIV, Division 3 — Obligations, Part 4 — Obligations Arising from Particular Transactions, Title 1.8 — Personal Data, Chapter 1 — Information Practices Act of 1977, Article 9 — Civil Remedies, Section 1798.49

An action to enforce any liability created under Sections 1798.45 to 1798.48, inclusive, may be brought in any court of competent jurisdiction in the county in which the complainant resides, or has his principal place of business, or in which the defendant’s records are situated, within two years from the date on which the cause of action arises, except that where a defendant has materially and willfully misrepresented any information required under this section to be disclosed to an individual who is the subject of the information and the information so misrepresented is material to the establishment of the defendant’s liability to that individual under this section, the action may be brought at any time within two years after discovery by the complainant of the misrepresentation. Nothing in Sections 1798.45 to 1798.48, inclusive, shall be construed to authorize any civil action by reason of any injury sustained as the result of any information practice covered by this chapter prior to July 1, 1978.

The rights and remedies set forth in this chapter shall be deemed to be nonexclusive and are in addition to all those rights and remedies which are otherwise available under any other provision of law.