New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules

Privacy Enforcement Tracker

1,711 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,711

Total Actions

16

Jurisdictions

$51.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
CTSettlement

Frontier Communications Parent Inc.

Connecticut reached a $625,000 settlement with Frontier Communications Parent Inc. over an April 2024 breach in which compromised employee and vendor credentials were used to access internal systems and exfiltrate unencrypted personal information of 58,841 Connecticut residents. The settlement requires Frontier to strengthen its security program, implement specific safeguards and training, and obtain an independent third-party assessment.

MediumData BreachSecurity Failure

$625K

CTSettlementMultistate

Boston Children’s Health Physicians and XTIUM

Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.

HighData BreachSecurity FailureHealth Data

$2.6M

CTCoalitionMultistate

Character Technologies, Inc.

Connecticut joined a coalition of state attorneys general filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive information it holds. The states seek protections for children and consumers if the company’s business or assets are sold or transferred; the filing does not impose a fine or other remedy.

LowChildren's DataHealth Data
CTInvestigation

Connecticut public utilities

Attorney General William Tong and Consumer Counsel Claire Coleman petitioned PURA to review how Connecticut public utilities use artificial intelligence, citing potential data privacy and cybersecurity risks, algorithmic errors, and misleading outputs. The petition asks PURA to examine utility AI systems, safeguards, vendors, and data security practices; it does not report a finding of violation or an imposed penalty.

Low
CTSettlement

RZ Smoke, Inc.

Connecticut Attorney General William Tong announced a settlement with RZ Smoke, Inc. over allegations that it distributed and sold high-potency cannabis products without a state license. The stipulated judgment is $2 million, with $375,000 payable to the State and $1.6 million suspended to ensure compliance; the company is barred from specified cannabis activities in Connecticut unless licensed.

High

$2.0M

CTSettlementMultistate

Takeda Pharmaceuticals, U.S.A., Inc.

Connecticut joined a coalition of states and the federal government in settling allegations that Takeda paid healthcare providers speaker honoraria and provided meals to induce prescriptions of Trintellix, leading to allegedly false claims to government healthcare programs. Takeda agreed to pay $13,670,921 plus accrued interest, with portions allocated to federal and state programs.

Critical

$13.7M

CTSettlementMultistate

Ascend Laboratories, Citron Pharma, and Mayne Pharma

Connecticut Attorney General William Tong led a coalition of 45 states and territories seeking court approval for settlements resolving allegations that Ascend Laboratories, Citron Pharma, and Mayne Pharma conspired to inflate prices and limit competition for generic prescription drugs. Ascend agreed to pay $400,000, Mayne agreed to pay $650,000, and Citron’s settlement includes non-monetary terms; the companies also agreed to internal reforms.

High

$1.1M

CTEnforcement ActionMultistate

RealPage, Inc.

A court denied RealPage’s attempt to have Connecticut’s antitrust case dismissed, allowing the lawsuit to continue. The complaint alleges that RealPage used landlords’ nonpublic, competitively sensitive rental data in an algorithm to recommend prices and that its practices inflated rents; no penalty or final remedy against RealPage is reported.

LowUnauthorized Data Sharing
CTEnforcement Action

The Home Depot, Inc.

Connecticut Attorney General William Tong announced that Home Depot had voluntarily provided assistance to Wren Kitchen customers after Wren filed for bankruptcy and consumers reported unfinished projects and undelivered products. Home Depot had assisted 286 customers with $1.235 million in relief and offered further help through October 31; the release does not describe a formal penalty or privacy violation.

Low
CTCoalitionMultistate

National Highway Traffic Safety Administration

Connecticut Attorney General William Tong joined a coalition of states and local governments in filing suit against NHTSA over its rule weakening fuel economy standards for new passenger cars and light trucks. The lawsuit alleges the rule violates the agency’s statutory mandate and the Administrative Procedure Act; no penalty or final remedy is reported.

Low
CTCoalitionMultistate

U.S. Environmental Protection Agency

Connecticut Attorney General William Tong joined a multistate coalition suing the EPA over its repeal of greenhouse gas pollution limits for power plants and separately filed a notice of intent to sue over regulation of existing gas plants. The coalition asks the court to overturn the repeal and restore the protections; the release reports no monetary penalty or final order.

Low
CTSettlementMultistate

Sandoz Inc. and Fougera Pharmaceuticals Inc.

Connecticut Attorney General William Tong announced a $400 million settlement with Sandoz Inc. and Fougera Pharmaceuticals Inc. resolving allegations that the generic drug manufacturers conspired to inflate prices, limit competition, and restrain trade. The settlement includes consumer restitution and injunctive reforms; court approval was being sought.

Critical

$400.0M

CTCoalitionMultistate

U.S. Department of Homeland Security

Connecticut Attorney General William Tong joined a coalition of 21 attorneys general in submitting a comment letter opposing a DHS rule that allows certain affirmative asylum applications to be referred to removal proceedings without an asylum officer interview. The coalition argues the rule violates federal law and harms asylum seekers, including unaccompanied children; this was a policy opposition letter, not a privacy enforcement action.

Low
CTCoalitionMultistate

NextEra Energy and Dominion Energy

Connecticut and Massachusetts co-led a coalition protest urging FERC to reject the proposed NextEra Energy-Dominion Energy merger. The coalition argued that the merger could increase market power and threaten energy affordability, reliability, and competition; the release does not report a final enforcement decision or penalty.

Low
CTGuidance

Unspecified home improvement contractors

Connecticut officials warned residents about potential home improvement scams before an approaching nor’easter, including unlicensed contractors, high-pressure sales tactics, and demands for full payment upfront. The release provides consumer guidance on checking contractors and contract requirements; it does not announce an enforcement action or penalty against a named entity.

Low
CTCoalitionMultistate

U.S. Department of Health and Human Services (HHS)

Connecticut Attorney General William Tong joined a coalition of 22 attorneys general and Pennsylvania’s governor in a letter urging HHS to keep federal vaccine recommendations grounded in scientific and medical evidence. The letter asks HHS to preserve the ACIP’s role and current vaccine recommendation categories; it is a policy advocacy action, not a privacy enforcement action.

Low
CTSettlementMultistate

Laboratory Corporation of America

Connecticut Attorney General William Tong led a 44-attorney-general coalition settlement with Laboratory Corporation of America over the 2019 AMCA breach, which potentially exposed personal information of more than 27.5 million people, including 10.2 million Labcorp patients. Labcorp will pay $2,287,455 and implement enhanced vendor-risk management, information-security, and oversight measures.

HighData BreachSecurity FailureHealth Data

$2.3M

CTCoalitionMultistate

AI industry

Connecticut Attorney General William Tong joined a bipartisan coalition of 25 attorneys general in a letter urging Congress to regulate AI development and preserve states’ authority to oversee the industry. The letter cites reports of AI agents escaping testing environments and performing dangerous or unlawful actions; it announces no enforcement action or penalty.

Low
CTEnforcement ActionMultistate

U.S. Department of the Interior

Connecticut Attorney General William Tong joined other state attorneys general in suing the federal government over deals that canceled offshore wind leases in exchange for payments to Bluepoint Wind and Invenergy. The states allege the deals unlawfully used taxpayer funds and failed to follow required procedures, and ask the courts to invalidate the deals and block their implementation.

Low
CTSettlementMultistate

Glenmark, Lannett, Bausch, Apotex, Heritage, and Emcure

Connecticut and a coalition of 47 other states and territories announced preliminary court approval of a plan to distribute funds from settlements with generic drug manufacturers accused of conspiring to inflate drug prices. The release does not give the date of the court’s preliminary approval, so the event date reflects the press release date.

Low
CTConsent DecreeMultistate

Warner Bros./Paramount

Connecticut Attorney General William Tong issued a statement regarding a consent decree secured with Warner Bros./Paramount to protect editorial independence of CNN and CBS News. The consent decree establishes an editorial board structure, though the AG expressed disappointment that full divestiture was not achieved.

Low
CTSettlementMultistate

Credit Acceptance Corporation

Connecticut Attorney General William Tong joined 40 other state attorneys general in a settlement with Credit Acceptance Corporation (CAC), one of the nation's largest subprime auto lenders, resolving allegations that CAC originated loans it knew or should have known consumers could not afford and encouraged or failed to prevent dealers from 'packing' CAC loans with unwanted Vehicle Service Contract (VSC) and GAP products. The settlement, announced September 17, 2026 and effective November 2, 2026, directs $694 million in cash restitution and debt relief to consumers, plus an additional $15 million to the states, and imposes injunctive lending reforms. Note: this is a consumer-protection/lending enforcement action rather than a data privacy matter; the violation categories are best-fit mappings to the available taxonomy.

CriticalDark PatternsNotice Failure

$694.0M

CTNew Law

N/A - General advisory to Connecticut businesses and consumers (no specific entity)

Connecticut Attorney General William Tong issued an advisory that newly enacted privacy laws take effect October 1, 2026, including Public Act 26-64 (SB4), which amends the Connecticut Data Privacy Act, and Public Act 26-15 (SB5), which established the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act). The new laws regulate surveillance pricing, facial recognition technology, genetic data collected by direct-to-consumer testing companies, a ban on the sale of precise geolocation data, a data broker registry, AI use in employment decisions, and chatbots offered to children. No enforcement action was taken; this is prospective guidance alerting consumers and businesses to new rights and compliance requirements.

LowSurveillance PricingBiometric DataHealth Data
CTSettlementMultistate

Abbott Laboratories

Connecticut joined 39 other states and the federal government in a $384 million False Claims Act settlement with Abbott Laboratories over allegations that the company failed to manufacture powder infant formula and nutritional therapy products in compliance with federal and state requirements at its Sturgis, Michigan, and Casa Grande, Arizona facilities. Abbott allegedly manufactured formula in conditions that risked microorganism contamination and failed to disclose contamination test results to the FDA during 2019 and 2022 inspections. The settlement resolves claims that Abbott caused false claims to be submitted to the WIC program and state Medicaid programs between January 1, 2018, and December 31, 2022.

CriticalSecurity FailureNotice FailureRecord Retention

$384.2M

CTCoalitionMultistate

Digital Asset Market Clarity Act (proposed federal legislation — no enforcement target entity)

Connecticut Attorney General William Tong joined a bipartisan coalition of 16 other state attorneys general in sending a letter to the U.S. Senate Banking Committee opposing the Digital Asset Market Clarity Act, warning it would preempt state authority to protect investors from cryptocurrency fraud and scams. The coalition urges Congress to preserve state enforcement, registration, and federal-state cooperation roles over digital assets. This is a legislative advocacy action, not an enforcement action — no entity was charged, no violations were found, and no penalty was imposed.

Low
CTInvestigation

MediaLab.AI Inc.

Connecticut Attorney General William Tong announced a civil investigative demand into MediaLab.AI Inc., owner of the Kik Messenger app, over lax age assurance practices, content moderation, and child safety failures that advocates have dubbed a "predator's paradise." The action follows a July 2025 notice of violation under the Connecticut Data Privacy Act for privacy notice deficiencies and processing sensitive data — including health, biometric, and precise geolocation data — without proper consent, which the company has only partially addressed. The new investigation seeks records related to practices that may constitute unfair or deceptive acts or practices under the CTDPA and the Connecticut Unfair Trade Practices Act. No fine has been imposed to date.

LowChildren's DataConsent FailureNotice Failure
CTGuidance

Hyperliquid

Attorney General William Tong issued a consumer alert warning Connecticut residents about unregulated, offshore decentralized finance (DeFi) cryptocurrency exchanges, naming GMX, Gains Network, dYdX, Aevo, Drift Protocol, Vertex Protocol, and Hyperliquid. The alert highlights risks including bypassing U.S. law via VPNs, predatory leverage up to 250x, misleading synthetic asset products, and lack of KYC protections. No enforcement action or penalty was imposed; at least one Connecticut consumer reportedly lost $200,000 deposited with an unregulated DeFi exchange.

LowDark PatternsSecurity Failure
CTSettlementMultistate

Zillow Group, Inc. and Redfin Corporation

Attorney General Tong and a coalition of four other states and the FTC sued Zillow and Redfin after Zillow paid Redfin $100 million to shut down its multifamily rental advertising business and transfer clients to Zillow. The settlement requires the companies to restore competition, with Redfin rebuilding its apartment advertising business, and pay $2 million to the coalition.

HighUnauthorized Data Sharing

$2.0M

CTEnforcement Action

Anthem, ConnectiCare, and UnitedHealthcare

Attorney General William Tong sent a letter to the Connecticut Insurance Department urging rejection of double-digit rate increases sought by Anthem, ConnectiCare, and UnitedHealthcare for individual and small group health insurance plans covering about 220,000 people. The letter argues the rates exceed inflationary measures and criticizes the carriers for failing to control costs and for poor claims system management, particularly ConnectiCare's transition to Molina Healthcare.

Low
CTSettlement

TaxAct

Connecticut Attorney General William Tong announced a $275,000 settlement with TaxAct, an online tax preparation company, over allegations that between January 2018 and December 2022, TaxAct improperly disclosed detailed customer financial information to Meta and Google through third-party tracking technologies without notifying taxpayers. The settlement requires TaxAct to pay $275,000 and implement new third-party tracking compliance measures, including a review committee, written policies, a tag monitoring system, and two independent third-party audits.

MediumUnauthorized Data SharingNotice Failure

$275K

Explore Enforcement Data