The Secretary may assess a civil penalty against any financial institution and any officer, employee, agent, or director of the institution for each knowing and willful violation of this subtitle. The civil penalty may not exceed $50 for each day the violation continues. For purposes of this section, a separate violation occurs at each office, branch, or place of business where a violation occurs or continues. The total civil penalty may not exceed $1,000. In the event of the failure of any person to pay any penalty assessed under this section, a civil action for recovery of the penalty may be brought by the State against the person.