New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules

Privacy Enforcement Tracker

1,711 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,711

Total Actions

16

Jurisdictions

$51.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
CTSettlement

Frontier Communications Parent Inc.

Connecticut reached a $625,000 settlement with Frontier Communications Parent Inc. over an April 2024 breach in which compromised employee and vendor credentials were used to access internal systems and exfiltrate unencrypted personal information of 58,841 Connecticut residents. The settlement requires Frontier to strengthen its security program, implement specific safeguards and training, and obtain an independent third-party assessment.

MediumData BreachSecurity Failure

$625K

TXSettlement

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

HighSecurity FailureUnauthorized Data Sharing

$3.0M

NYSettlementMultistate

Boston Children’s Health Physicians, LLP and XTIUM

New York and Connecticut reached a settlement with Boston Children’s Health Physicians and its IT security provider, XTIUM, after a 2024 breach exposed private information of approximately 825,000 New York residents and 62,871 Connecticut residents. The companies will pay $2.64 million and implement enhanced cybersecurity measures; additional penalties are conditional on violating the settlement.

HighData BreachSecurity FailureEmployee Data

$2.6M

CTSettlementMultistate

Boston Children’s Health Physicians and XTIUM

Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.

HighData BreachSecurity FailureHealth Data

$2.6M

MNGuidance

Trajector Holdings, LLC

Minnesota Attorney General Keith Ellison issued a consumer alert explaining how veterans, their families, and others who believe Trajector Holdings owes them money can file claims in the company’s Chapter 11 bankruptcy. The release announces no privacy violation, enforcement penalty, or remedy against the company.

Low
FTCEnforcement Action

REPS & Company Inc.

The FTC referred a complaint against REPS & Company Inc. and company executives, alleging they bypassed ticket-issuer security controls and purchasing limits to acquire millions of tickets for resale. The complaint was filed by the Department of Justice, and the case will be decided by the court; the press release does not report a penalty or other remedy imposed.

Low
TXSettlementMultistate

Albertsons Companies, Inc.

Texas Attorney General Ken Paxton announced that a multistate coalition had secured an opioid settlement with Albertsons, which would require the grocery chain to pay more than $773 million nationally once final. Texas and its political subdivisions may receive up to $57.8 million for opioid abatement; the release does not identify privacy violations.

Critical

$773.0M

NYCoalitionMultistate

U.S. Department of Justice

New York Attorney General Letitia James joined 16 other attorneys general in urging Congress to pass proposed legislation addressing the federal government’s release of Jeffrey Epstein-related records. The press release says DOJ has not fully disclosed the records required by the original law and that personal information of at least 43 victims was exposed in released files; this is a legislative advocacy announcement, not an enforcement action imposing a penalty or remedy.

LowData Breach
NYSettlement

DolGen New York, LLC and Dollar General Corporation

New York Attorney General Letitia James secured a settlement after an investigation found Dollar General stores routinely charged customers more than advertised or posted prices and issued confusing receipts. Dollar General must donate $1.875 million in food and personal items to Foodlink and implement pricing, receipt, training, and audit reforms.

High

$1.9M

NJCoalitionMultistate

Character Technologies, Inc.

New Jersey joined a coalition of state attorneys general in filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive conversations it holds, including those involving children and mental health. The states seek safeguards for consumers’ personal information in any sale or transfer of the company’s business or assets; the release does not report a fine or final finding of violations.

LowChildren's DataHealth Data
VACoalitionMultistate

Character Technologies, Inc.

Virginia joined a multistate coalition filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s privacy and safety practices and the sensitive chatbot conversations it holds. The filing seeks protections for children and consumers in any sale or transfer of the business or assets; the release does not report a fine or final finding of violations.

LowChildren's DataHealth Data
TXEnforcement Action

Gerber Products Company and Nestlé USA, Inc.

Texas Attorney General Ken Paxton sued Gerber Products Company and Nestlé USA, Inc., alleging that Gerber made deceptive safety and testing claims while its baby food contained dangerous levels of toxic heavy metals. The lawsuit asserts claims under the Texas Deceptive Trade Practices Act; the release does not report a settlement, monetary penalty, or court order.

Low
COCoalitionMultistate

Character Technologies, Inc.

Colorado Attorney General Phil Weiser led a multistate coalition in filing a notice in Character Technologies, Inc.’s bankruptcy, citing concerns about the company’s safety and privacy practices and sensitive chatbot conversations involving children and adults. The filing seeks protections in any sale or transfer of the company’s business or assets; no penalty or final remedy is reported.

LowChildren's DataHealth Data
NYGuidance

New York State Office of the Attorney General

New York Attorney General Letitia James released an updated guide warning voters that AI-generated election content and chatbots may provide misleading information. This is public guidance, not an enforcement action, and the release describes no penalty or privacy violation.

Low
NYCoalitionMultistate

Character Technologies, Inc.

New York Attorney General Letitia James and a bipartisan coalition of 39 other attorneys general filed a motion in Character Technologies, Inc.’s bankruptcy, citing risks to children and sensitive user information and potential violations of state privacy laws. The coalition asks the court, the company, and any prospective buyer to require meaningful privacy and safety protections; no fine or final remedy is reported.

LowChildren's DataHealth DataConsent Failure
CTCoalitionMultistate

Character Technologies, Inc.

Connecticut joined a coalition of state attorneys general filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive information it holds. The states seek protections for children and consumers if the company’s business or assets are sold or transferred; the filing does not impose a fine or other remedy.

LowChildren's DataHealth Data
MNCoalitionMultistate

Character Technologies, Inc.

Minnesota and 39 other attorneys general filed a notice in Character Technologies, Inc.’s bankruptcy proceedings raising concerns about the company’s safety and privacy practices and the sensitive information it holds, including children’s private chatbot conversations. The states seek protections for consumers in any sale or transfer of the business or assets; the filing does not impose a penalty or establish a final remedy.

LowChildren's DataHealth Data
FTCEnforcement Action

Digital Forensics Corporation LLC

The FTC sued Digital Forensics Corporation LLC and affiliated defendants, alleging they misled sextortion victims with promises of investigative and monitoring services that often were not provided, and used fake positive reviews. A federal court granted the FTC’s request to temporarily halt the defendants’ activities; the complaint remains for the court to decide.

Low
NYEnforcement ActionMultistate

Martin Shkreli

New York Attorney General Letitia James, the FTC, and six other state attorneys general asked a federal court to hold Martin Shkreli in contempt for allegedly trading pharmaceutical stocks and discussing pharmaceutical companies in violation of his lifetime industry ban. The requested sanctions include divestiture, an accounting of his trading, forfeiture of trading profits, and possible further fines or incarceration; the release describes a request to the court, not a new ruling imposing those measures.

Low
CTInvestigation

Connecticut public utilities

Attorney General William Tong and Consumer Counsel Claire Coleman petitioned PURA to review how Connecticut public utilities use artificial intelligence, citing potential data privacy and cybersecurity risks, algorithmic errors, and misleading outputs. The petition asks PURA to examine utility AI systems, safeguards, vendors, and data security practices; it does not report a finding of violation or an imposed penalty.

Low
COGuidance

Online retailers (not specifically named)

Colorado Attorney General Phil Weiser issued a public advisory explaining that e-bikes must meet statutory class requirements and that retailers must clearly disclose what they are selling. The advisory warns that marketing a higher-powered electric vehicle as an e-bike without required disclosures may violate state consumer protection law; it announces no penalty or binding remedy.

Low
NYSettlement

Alex Mashinsky

New York Attorney General Letitia James announced a settlement with former Celsius CEO Alex Mashinsky over allegations that he misled investors about Celsius’s safety, users, and investment strategies, and failed to register as required under New York law. The settlement permanently bars Mashinsky from the securities, commodities, and cryptocurrency industries and provides for up to $35 million in payments to New York under specified conditions.

Critical

$35.0M

NYCoalitionMultistate

U.S. Department of Labor

New York Attorney General Letitia James and a multistate coalition sued the U.S. Department of Labor, alleging it unlawfully canceled grants for state unemployment insurance system upgrades after approving the states’ plans. The coalition seeks restoration of the remaining funding and damages; the release does not report a court ruling or penalty.

Low
CTSettlement

RZ Smoke, Inc.

Connecticut Attorney General William Tong announced a settlement with RZ Smoke, Inc. over allegations that it distributed and sold high-potency cannabis products without a state license. The stipulated judgment is $2 million, with $375,000 payable to the State and $1.6 million suspended to ensure compliance; the company is barred from specified cannabis activities in Connecticut unless licensed.

High

$2.0M

CTSettlementMultistate

Takeda Pharmaceuticals, U.S.A., Inc.

Connecticut joined a coalition of states and the federal government in settling allegations that Takeda paid healthcare providers speaker honoraria and provided meals to induce prescriptions of Trintellix, leading to allegedly false claims to government healthcare programs. Takeda agreed to pay $13,670,921 plus accrued interest, with portions allocated to federal and state programs.

Critical

$13.7M

COEnforcement ActionMultistate

U.S. Department of Labor

Colorado Attorney General Phil Weiser and a multistate coalition sued the U.S. Department of Labor over its termination of grants for unemployment insurance system improvements. The states allege the terminations breached their grant agreements and seek money damages; the release does not describe a privacy violation or an imposed penalty.

Low
TXEnforcement Action

Rubinsky Roofing LLC

The Texas Attorney General obtained a judgment holding Rubinsky Roofing LLC liable for 27 violations of the Texas Deceptive Trade Practices Act, including deceptive practices involving older consumers and payment for unnecessary or unfinished repairs. The judgment requires more than $1.5 million in civil penalties, allocates at least $500,000 to consumer restitution, and permanently bars the company and its owner from the practices at issue.

High

$1.5M

NYSettlementMultistate

Ascend Laboratories and Mayne Pharma

New York and a coalition of 47 other attorneys general secured settlements with Ascend Laboratories and Mayne Pharma over an alleged scheme to inflate generic drug prices and reduce competition. Mayne agreed to pay $650,000 and Ascend $400,000, with settlement funds distributed to impacted consumers and the companies agreeing to internal antitrust reforms.

High

$1.1M

CTSettlementMultistate

Ascend Laboratories, Citron Pharma, and Mayne Pharma

Connecticut Attorney General William Tong led a coalition of 45 states and territories seeking court approval for settlements resolving allegations that Ascend Laboratories, Citron Pharma, and Mayne Pharma conspired to inflate prices and limit competition for generic prescription drugs. Ascend agreed to pay $400,000, Mayne agreed to pay $650,000, and Citron’s settlement includes non-monetary terms; the companies also agreed to internal reforms.

High

$1.1M

FTCSettlement

Greenway Auto Group

The FTC alleged that Greenway Auto Group advertised vehicle prices thousands of dollars below the amounts consumers actually paid and used mailers falsely suggesting recipients had won cash prizes. Greenway agreed to an order requiring transparent pricing and prohibiting deceptive prize mailers and other misrepresentations; the press release does not state a monetary penalty.

Low

Explore Enforcement Data