New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules

Privacy Enforcement Tracker

1,711 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,711

Total Actions

16

Jurisdictions

$51.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
TXSettlementMultistate

Agri Stats, Inc.

Texas Attorney General Ken Paxton and the U.S. Department of Justice secured a settlement with agricultural data broker Agri Stats, Inc. for facilitating the sharing of competitively sensitive information among meat processors, reducing competition and raising prices for chicken, pork, and turkey. Under the settlement, Agri Stats will implement industry-wide changes to its information distribution practices and make monetary payments to participating states. The settlement aims to restore competition in the agriculture industry and lower grocery prices for consumers.

Critical
VACoalitionMultistate

Trump Administration

A coalition of 24 states led by Virginia Attorney General Jay Jones won a lawsuit against the Trump Administration, invalidating illegal tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade ruled the tariffs were unauthorized by law, as a trade deficit does not constitute the required 'large and serious balance-of-payment deficits' under the statute. The ruling prevents the administration from enforcing the 10% worldwide tariffs on most products.

Low
CASettlementMultistate

General Motors

California Attorney General Rob Bonta, along with multiple district attorneys and the California Privacy Protection Agency, announced a $12.75 million settlement with General Motors for illegally selling hundreds of thousands of Californians' location and driving data to data brokers Verisk and LexisNexis without notice or consent. The settlement includes the largest CCPA penalty to date, a five-year ban on selling driving data to consumer reporting agencies, and requirements to delete retained data and implement a robust privacy program.

CriticalGeolocation DataUnauthorized Data SharingNotice Failure

$12.8M

CTNew Law

Bad actor platforms

Connecticut’s legislature passed House Bill 5312, creating new civil enforcement mechanisms for deepfake digital sexual assault, including unauthorized dissemination of synthetically created intimate images and AI-generated child pornography. The bill establishes a private right of action for victims and empowers the Connecticut Attorney General to pursue civil injunctions and penalties against abusers and platforms hosting illegal content. This builds on prior Connecticut laws criminalizing unauthorized intimate image dissemination.

LowConsent FailureChildren's Data
CTNew Law

None

Connecticut Attorney General William Tong praised final passage of House Bill 5312, which creates new civil enforcement mechanisms for deepfake digital sexual assault. The legislation allows the AG to pursue civil injunctions and penalties against platforms that disseminate illegal synthetic intimate images, including AI-generated child pornography, and establishes a private right of action for victims. The bill builds on prior Connecticut laws criminalizing unauthorized dissemination of intimate images.

LowChildren's Data
OREnforcement ActionMultistate

Trump Administration

Oregon Attorney General Dan Rayfield led a 24-state coalition in a lawsuit challenging the Trump Administration’s tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade granted summary judgment to the states, ruling the tariffs illegal as they did not meet the statutory requirement of “large and serious balance-of-payment deficits.” The court invalidated the 10 percent tariffs on most global products, barring their enforcement.

Low
FTCGuidance

N/A (workshop announcement, not enforcement)

This is a press release announcing a workshop co-hosted by the FTC and the Institute for Consumer Financial Choice (ICFC) on May 14-15, 2026, focusing on developments in the financial services marketplace. No enforcement action, fine, or violation is involved.

Low
CTSettlement

Made-in-China

Connecticut Attorney General William Tong announced a settlement with international trade platform Made-in-China to cease all U.S. sales of unlawful 'research grade' GLP-1 weight loss drugs following an investigation into direct sales to consumers without prescriptions or medical oversight. The settlement prohibits the platform from hosting GLP-1 sales to U.S. customers, requires a monitoring system to remove non-compliant listings, and imposes a $300,000 penalty suspended after an initial $30,000 payment. Additional settlements were announced with Radiance Medspa and Advanced Medical Weight Loss over compounded non-FDA approved GLP-1 drugs.

Medium

$300K

TXInvestigation

Drone Nerds, LLC

Texas Attorney General Ken Paxton initiated an investigation into Drone Nerds, LLC over its partnership with CCP-affiliated Anzu Robotics, which markets drones with concealed surveillance capabilities and unauthorized data collection risks. Drone Nerds is accused of deceiving Texas consumers by misrepresenting Anzu’s ties to China and falsely claiming the drones are U.S.-based with secure privacy practices. The investigation is being conducted under the Texas Deceptive Trade Practices Act, with a Civil Investigative Demand issued to gather evidence of consumer deception and privacy violations.

LowSecurity FailureUnauthorized Data Sharing
FTCSettlement

Kochava, Inc. and Collective Data Solutions (CDS)

The FTC settled charges with data broker Kochava, Inc. and its subsidiary Collective Data Solutions (CDS) over allegations that they sold precise location data from hundreds of millions of mobile devices without consumer consent, enabling tracking of visits to sensitive locations like reproductive health clinics and places of worship. The settlement prohibits the companies from selling or sharing sensitive location data without affirmative express consumer consent, and imposes compliance requirements including a sensitive location data program, supplier consent assessments, incident reporting, and data retention schedules. No monetary penalty was imposed.

LowConsent FailureGeolocation DataUnauthorized Data Sharing
TXSettlementMultistate

Purdue Pharma, Inc. and the Sackler Family

Texas Attorney General Ken Paxton announced the effective date of a $7.4 billion settlement with Purdue Pharma, Inc. and the Sackler family over their role in fueling the opioid crisis. Texas will receive $286.5 million from the settlement, bringing the state’s total opioid recovery funds to over $3 billion. The settlement includes permanent bans on Sackler opioid sales in the U.S., public release of 30 million company documents, and distribution of funds for addiction treatment and prevention over 15 years.

Critical

$7.4B

NYCoalitionMultistate

N/A

This press release announces New York Attorney General Letitia James leading a coalition of 21 state attorneys general, the District of Columbia, and Pennsylvania’s Governor in filing an amicus brief with the U.S. Supreme Court to stay a Fifth Circuit ruling that would reinstate in-person dispensing requirements for mifepristone, a medication used for abortion. The coalition argues the ruling is scientifically unsupported, would restrict telehealth access to reproductive care, and undermines state sovereignty over abortion policy post-Dobbs. This is not a privacy-related enforcement action, as the content addresses reproductive health policy rather than data privacy violations.

Low
CTNew Law

social media companies

Connecticut Attorney General William Tong issued a statement on May 1, 2026, announcing the final passage of bipartisan legislation targeting youth social media addiction and artificial intelligence harms. The legislation imposes new obligations on social media companies regarding minor account settings, parental consent, and reporting, as well as requirements for AI chatbot operators and employers using automated decision tools. The statement also references ongoing enforcement actions against Meta and TikTok for allegedly designing addictive platform features for youth.

LowChildren's DataAI/Automated DecisionsConsent Failure
CTNew Law

Office of the Attorney General William Tong

Connecticut Attorney General William Tong issued a statement on May 1, 2026, following final passage of bipartisan legislation to combat youth social media addiction and regulate artificial intelligence harms. The legislation imposes new requirements on social media companies regarding minor users, including parental consent for addictive algorithms, default privacy settings, and annual reporting obligations. It also establishes rules for AI chat bots and automated employment decision tools, including disclosure requirements and self-harm detection protocols.

LowChildren's DataAI/Automated Decisions
CTSettlementMultistate

Purdue Pharma

Connecticut Attorney General William Tong announced that Purdue Pharma will dissolve as the company’s bankruptcy concludes and a $7.4 billion settlement with Purdue and the Sackler family takes effect. The settlement permanently bars the Sacklers from selling opioids in the U.S., directs funds to addiction treatment and prevention, and requires the release of over 30 million documents related to Purdue’s opioid business. Connecticut is expected to receive $64 million from the settlement, with first payments anticipated in fall 2026.

Critical

$7.4B

CAGuidance

California Privacy Protection Agency

The California Privacy Protection Agency Board voted to support two bills (AB 1542 and SB 1106) and took a 'support if amended' position on a third bill (AB 883). These bills aim to strengthen privacy protections by expanding sensitive data protections, improving deletion rights under the Delete Act, and providing expedited deletion for elected officials and judges.

Low
CPPASettlement

General Motors

CalPrivacy and the California Attorney General secured a $12.75 million settlement from General Motors for data sharing practices from connected vehicles. The settlement includes injunctive terms to change business practices.

CriticalUnauthorized Data Sharing

$12.8M

NJAdministrative OrderMultistate

Titan Macro Finance

The New Jersey Bureau of Securities issued a Cease and Desist Order on April 30, 2026, against Titan Macro Finance for operating an investment fraud scheme via WhatsApp and Instagram that defrauded at least one New Jersey investor of $64,000. The scheme involved unregistered broker-dealer activity, fake trading profits, and undisclosed fees to access investor funds. The action was coordinated with the California Department of Financial Protection and Innovation, which issued a similar order against the entity for violating California’s Commodity Code.

Low
NYSettlement

Uphold HQ, Inc.

New York Attorney General Letitia James secured a $5 million settlement from cryptocurrency platform Uphold HQ, Inc. for promoting Cred’s fraudulent CredEarn investment product as safe and reliable, when Cred was making risky loans to uncreditworthy borrowers in China. Uphold also falsely claimed Cred had comprehensive insurance and promoted the product without registering as a broker or commodity broker-dealer under New York law. As part of the settlement, Uphold will pay $5 million to harmed investors, remit $545,189 from Cred’s bankruptcy to customers, improve due diligence policies for third-party products, and register as a broker with the OAG.

High

$5.0M

CTRegulatory Report

Eversource

Connecticut Attorney General William Tong filed a brief on April 29, 2026, urging the Public Utilities Regulatory Authority (PURA) to reject Eversource’s request for $340 million in interest payments on nearly $1 billion in unvetted storm costs from 2018 to 2023. This press release does not describe a privacy-related enforcement action, as no data privacy violations are alleged, and no final enforcement action has been taken against Eversource. The matter involves utility cost recovery and regulatory advocacy, not privacy compliance.

Low
NYCoalitionMultistate

American Express, Capital One, Citi Group, Mastercard, Visa, PayPal, Stripe, Sezzle, Block (operator of Square, Cash App, and Afterpay)

New York Attorney General Letitia James led a bipartisan coalition of 24 state attorneys general, Puerto Rico, and New York City in sending letters to nine major credit card companies and payment processors urging them to block transactions facilitating illegal vaping product sales. The coalition cites federal and state laws prohibiting unauthorized e-cigarette sales, particularly to youth, and requests collaboration to prevent payment networks from processing such transactions. No enforcement penalties or actions were imposed as part of this initiative.

Low
CTCoalitionMultistate

Bipartisan Coalition of 25 State Attorneys General and City of New York

On April 28, 2026, Connecticut Attorney General William Tong joined a bipartisan coalition of 24 other state attorneys general and New York City in sending letters to major credit card companies and payment processors urging them to block transactions facilitating illegal vaping product sales. The coalition highlighted that most vapor products lack required FDA authorization and many online sellers violate the federal Prevent All Cigarette Trafficking (PACT) Act, including failing to implement youth access safeguards. The coalition requested a meeting to discuss prohibiting noncompliant merchants from using payment networks, building on existing state enforcement actions against illegal vape sellers.

Low
NYSettlementMultistate

Purdue Pharma

New York Attorney General Letitia James announced the shutdown of opioid manufacturer Purdue Pharma as part of a $7.4 billion settlement with a bipartisan coalition of 54 other state attorneys general. The Sackler family, former owners of Purdue, are permanently barred from selling opioids in the U.S. and have no involvement in Knoa Pharma, the new public benefit corporation replacing Purdue. Purdue was sentenced on criminal charges related to its role in the opioid crisis on April 28, 2026, with the new entity operating under strict oversight and excess revenue funding opioid abatement efforts.

Critical

$7.4B

NYEnforcement Action

Miles Burton Marshall

New York Attorney General Letitia James announced the conviction of tax preparer and insurance agent Miles Burton Marshall for operating a decades-long Ponzi scheme that defrauded 988 investors out of more than $50 million. Marshall pleaded guilty to Grand Larceny in the Second Degree, Securities Fraud under the Martin Act, and Scheme to Defraud in the First Degree, and faces four to 12 years in prison plus approximately $90 million in restitution to victims.

Low
CTCoalitionMultistate

American Express, Capital One, Citi Group, Mastercard, Visa, PayPal, Stripe, Sezzle, Block (operator of Square, Cash App, and Afterpay)

On April 28, 2026, Connecticut Attorney General William Tong joined a bipartisan coalition of 24 other attorneys general and New York City in sending letters to major credit card companies and payment processors urging them to block transactions facilitating sales of illegal vaping products. The coalition, led by New York, Pennsylvania, California, and NYC, called for collaboration to stop unlawful sales of unauthorized e-cigarettes that violate federal FDA premarket authorization requirements and the PACT Act. The letters request a meeting to discuss prohibiting noncompliant merchants from using the payment networks, citing past successful government-private sector collaboration in reducing illegal tobacco sales.

Low
FTCSettlement

Steven and Gina Merritt

The FTC settled allegations against Steven and Gina Merritt, high-level participants in the LifeWave MLM company, for making false and unsubstantiated earnings claims to recruit workers despite most LifeWave participants earning little to no money. The stipulated final order prohibits the Merritts from making deceptive earnings representations and requires them to notify their downline participants of the order's prohibitions. No monetary penalty was imposed.

Low
VARegulatory Report

Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.

LowChildren's Data
CAGuidance

California Privacy Protection Agency

The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.

LowNotice FailureOpt-Out FailureData Broker Non-Compliance
FTCEnforcement Action

Innovative Partners, LP; American Collective, LP; Papyrus Green Investments LLC; Health Plan Administrators, LLC; Amani Ibrahim Shokry; Ahmed Ibrihim Shokry

The FTC filed a complaint and obtained a temporary restraining order against six defendants operating a deceptive health care scheme that impersonated government and insurance carriers to sell fake comprehensive health plans. The defendants allegedly charged consumers without express informed consent, failed to disclose material terms including cancellation processes, and misled consumers into paying for inadequate coverage that left many with substantial medical debt. The FTC seeks refunds for affected consumers and alleges violations of the FTC Act, Telemarketing Sales Rule, Impersonation Rule, and Gramm-Leach-Bliley Act.

LowConsent FailureNotice Failure
NJGuidance

Meta Platforms, Inc.

New Jersey Attorney General Jennifer Davenport and the Bureau of Securities issued a public warning to state residents about fraudulent investment schemes proliferating on Meta-owned platforms including Facebook, Instagram, and WhatsApp. The alert details common scam tactics such as pump-and-dump schemes, confidence scams, and fraudulent cryptocurrency offerings, and provides tips for residents to avoid victimization. No enforcement action against any entity was announced in this release.

Low

Explore Enforcement Data