Are you sure you're reading that right? It looks like this bill is actually circumventing loopholes in the Fair Credit Reporting Act with civil liability and class action lawsuits. Idk what the Fair credit reporting act said about class actions or civil liabilities so i could be wrong but the language of the bill makes:

(a) Willful noncompliance.—Section 616 of the Fair Credit Reporting Act (15 U.S.C. 1681n) is amended—

“(d) Class action lawsuits.—With respect to a class action (as such term is defined in section 1711 of title 28, United States Code), or series of class actions arising out of the same failure to comply of a person, brought by consumers against a person who willfully fails to comply with any requirement imposed under this title, such person is liable to such consumers in such an amount as a court may determine, except that—

“(1) the court may not apply a minimum amount of damages for each member of the class; and

“(2) the total recovery (excluding reasonable attorney’s fees as determined by the court) of the class shall not exceed the lesser of—

“(A) $500,000; or

“(B) 1 percent of the net worth of such person.”.

(b) Negligent noncompliance.—Section 617 of the Fair Credit Reporting Act (15 U.S.C. 1681o7) is amended by adding at the end the following new subsection:

(Pretty much the same as the willfull noncompliance rules)

A $500,000 maximum per person is nothing to scoff at.I doubt identity thieves have ever stolen that much from one person before.