It’s right at the top of the linked bill.

The attorney general or a district attorney may bring a civil action on behalf of the state against a person that violates the prohibition against individualized price or wage setting based on surveillance data to seek the imposition of civil penalties. In addition, a person aggrieved by a violation of the prohibition specified in the bill may bring a civil action on behalf of themself or a group of similarly situated persons to restrain further violations and to recover damages, costs, and reasonable attorney fees. A violation of the prohibition against individualized price setting or individualized wage setting is a deceptive trade practice under the "Colorado Consumer Protection Act".

The article links to the law. Looks like this is an addition to the existing law about unfair or deceptive trade practices. That allows for a civil penalty of up to $20,000 per person or transaction involved.