If you believe that a CRO has violated the law, you can file a complaint with your state Attorney General and the Consumer Financial Protection Bureau. You can also file a lawsuit against the CRO for actual damages, punitive damages, costs and attorney's fees for violations of the CROA.