(a) Failure to comply with a requirement of this chapter or a regulation adopted under this chapter is not a basis for civil liability, but may be the basis for employee discipline or administrative action to restrict a person's or agency's access to information. However, a person whose criminal justice information has been released or used in knowing violation of this chapter or a regulation adopted under this chapter may bring an action for damages in the superior court.
(b) It is a defense to a civil or criminal action based on a violation of this chapter, or regulations adopted under this chapter, if a person relied in good faith upon the provisions of this chapter or of other laws or regulations governing maintenance, release, or use of criminal justice information, or upon policies or procedures established by a criminal justice agency.