An action to enforce any liability created under this subtitle may be brought within two years from the date on which the liability arises, except that where a defendant has materially and willfully misrepresented any information required under this subtitle to be disclosed to an individual and the information so misrepresented is material to the establishment of the defendant's liability to that individual under this subtitle, the action may be brought at any time within two years after discovery by the individual of the misrepresentation.