New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules

Privacy Enforcement Tracker

1,711 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,711

Total Actions

16

Jurisdictions

$51.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
ORSettlementMultistate

Glenmark, Lannett, Bausch, Apotex, Heritage, and Emcure

Oregon and a multistate coalition announced a plan to distribute settlement funds to people who paid inflated prices for certain generic drugs. The release says a federal court granted preliminary approval of the distribution plan this month; it does not give the date of that approval, and the reported conduct concerns alleged antitrust violations rather than a privacy violation.

Critical

$96.5M

NYConsent DecreeMultistate

Paramount Skydance Corp. and Warner Bros. Discovery, Inc.

New York Attorney General Letitia James and a coalition of 11 other attorneys general secured enforceable commitments from Paramount Skydance Corp. and Warner Bros. Discovery, Inc. to protect entertainment industry workers during their merger. Paramount must release at least 30 films per year, invest $1.5 billion in domestic film production, and create an independent editorial board for CNN and CBS. The consent decree also requires Paramount to sell Miramax and pay penalties if it fails to meet production requirements.

Low
CTConsent DecreeMultistate

Warner Bros./Paramount

Connecticut Attorney General William Tong issued a statement regarding a consent decree secured with Warner Bros./Paramount to protect editorial independence of CNN and CBS News. The consent decree establishes an editorial board structure, though the AG expressed disappointment that full divestiture was not achieved.

Low
COSettlementMultistate

Paramount Skydance Corporation

Colorado Attorney General Phil Weiser joined a coalition of 12 attorneys general in settling a lawsuit against Paramount Skydance Corporation over its merger with Warner Bros. Discovery, which the states alleged would harm competition by lowering film output and raising prices. The settlement includes a five-year commitment to increase film output, a $1.5 billion investment in domestic production, a $47.5 million worker fund, and an independent monitor. This is an antitrust/competition enforcement action, not a privacy enforcement action, despite the extraction schema's privacy focus.

Low
VACoalitionMultistate

Coalition of 24 Attorneys General

Attorney General Jay Jones joined a coalition of 24 attorneys general in filing a comment letter opposing a proposed CMS rule that the coalition says oversteps federal law, could put Medicaid funding at risk, and interfere with state regulation of health insurance. The coalition urges CMS to withdraw or significantly revise the proposed rule.

Low
ORCoalitionMultistate

U.S. federal government

A federal court granted Oregon and a coalition of other attorneys general summary judgment in a lawsuit challenging federal restrictions on access to social services. The ruling vacated the rules that threatened programs including Head Start, Title X clinics, food banks, and community health centers; the release describes no monetary penalty or privacy violation.

Low
ORSettlementMultistate

Paramount Skydance Corporation

Oregon and a coalition of state attorneys general settled their lawsuit challenging Paramount Skydance Corporation’s merger with Warner Bros. Discovery. The proposed, court-enforceable settlement sets film production and release commitments, cable negotiation restrictions, worker and independent-film funding, and a conditional $30 million payment for each missed film-output requirement.

Critical

$30.0M

NYSettlement

Brooklyn High Rise LLC

New York Attorney General Letitia James settled with Brooklyn High Rise LLC for illegally denying housing to prospective tenants based on housing court records, a practice known as tenant blacklisting. The company also charged non-refundable 'good faith' deposits. Brooklyn High Rise will pay $352,250 in penalties and restitution and must end its unlawful tenant screening practices.

MediumConsent FailureUnauthorized Data Sharing

$352K

VAEnforcement ActionMultistate

U.S. Department of Transportation

Attorney General Jay Jones and a coalition of 24 attorneys general obtained a preliminary injunction blocking the Trump administration from demanding a database of state-owned records containing personal information of 17 million CDL drivers from AAMVA and from terminating over $10 million in federal funding. The lawsuits allege DOT, FMCSA, and DHS violated federal privacy laws by secretly creating a database with no guardrails on use or sharing of Social Security numbers and no public notice.

LowUnauthorized Data SharingNotice FailureSecurity Failure
FTCSettlement

Amazon.com, Inc.

A federal court approved a revised order in the FTC's Amazon Prime case under which Amazon will accelerate and expand redress payments under the September 2025 $2.5 billion settlement, which resolved allegations that Amazon enrolled millions of consumers in Prime subscriptions without their consent and knowingly made cancellation difficult. More consumers now qualify for refunds, the maximum payment cap rises from $51 to $200, and all future payments will be distributed automatically starting October 1, 2026, with potential supplemental $149 payments by April 2027. Amazon has already issued more than $845 million in redress payments as of September 2026.

CriticalConsent FailureDark Patterns

$2.5B

FTCSettlementMultistate

Amway Corp.

The FTC and the state of Washington filed a joint complaint and proposed stipulated order requiring Amway Corp. and two affiliates—World Wide Group, L.L.C. (WWG) and Leadership Team Development Inc. (LTD)—to pay a $225 million judgment, the largest monetary recovery ever obtained from an MLM in an FTC action, over allegations that they used deceptive earnings claims and unfair tactics to recruit Independent Business Owners. The complaint alleges the companies falsely promised substantial income and recruitment success, pressured IBOs to buy products they could not resell, and instructed IBOs to falsely report sales. Nearly all of the judgment will be used as redress for IBOs who lost money, and the proposed order imposes structural reforms including a 70% resale requirement, independent audits of sales records, and a ban on approved providers charging new IBOs for first-year training.

Critical

$225.0M

FTCSettlement

FleetCor Technologies Inc. (now Corpay Inc.)

FleetCor Technologies Inc. (now Corpay Inc.) and its CEO Ronald Clarke agreed to pay $100 million to settle an FTC administrative action alleging the company charged small business customers hidden and unauthorized fees for fuel cards and misrepresented gas savings, fraud-control features, and fees. A federal district court granted the FTC summary judgment on all counts in 2023, and a federal appeals court upheld that judgment and the permanent injunction in 2026. The settlement funds will be used to provide redress to harmed business customers.

CriticalConsent FailureNotice FailureDark Patterns

$100.0M

TXGuidance

N/A (consumer alert; no enforcement target)

Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofits about a surge of demand letters alleging California Invasion of Privacy Act (CIPA) violations based on common website technologies such as cookies, pixels, and analytics tools. The AG cautions that some letters may exaggerate or misrepresent violations and may be fraudulent, noting serial CIPA plaintiff Vivek Shah has been declared a vexatious litigant. Recipients are advised not to pay or respond directly, to consult privacy counsel, and to report suspected fraud to the Consumer Protection Division.

LowUnauthorized Data SharingConsent Failure
NYGuidance

Various AI developers (no specific entity named)

New York Attorney General Letitia James issued an industry alert urging workers with knowledge of unsafe or illegal conduct in AI development to file confidential complaints through the OAG's secure whistleblower portal. The alert cites the OAG's monitoring of cybersecurity, economic, and other safety risks from emerging AI, and highlights the RAISE Act (effective January 1, 2027), which will require large AI developers to publicly disclose safety measures and report security incidents, as well as the SHIELD Act's data security requirements. No company was named, charged, or penalized; the alert signals impending OAG enforcement authority over AI developers.

LowAI/Automated DecisionsSecurity Failure
NYSettlementMultistate

Credit Acceptance Corporation

New York Attorney General Letitia James, leading a bipartisan coalition of 39 other states, the District of Columbia, and Hawaii's Office of Consumer Protection, secured a $700 million settlement from Credit Acceptance Corporation (CAC), a subprime auto lender, resolving allegations of deceptive and abusive lending. The lawsuit alleged CAC pushed tens of thousands of consumers into unaffordable loans with average interest rates above 38 percent, bundled with expensive add-on products consumers were told were mandatory or never told about, causing widespread defaults and vehicle repossessions. Note: this is a consumer-lending enforcement action rather than a privacy matter, so no privacy violation categories from the taxonomy apply.

Critical

$700.0M

COSettlementMultistate

Credit Acceptance Corporation

Colorado and 40 other states entered into a settlement with Credit Acceptance Corporation (CAC), one of the nation's largest subprime auto lenders, resolving allegations that CAC originated car loans it knew or should have known consumers could not afford and that it failed to reasonably prevent dealers in its network from deceptively 'packing' Vehicle Service Contract and GAP add-on products into CAC-financed purchases. The settlement provides $694 million in cash and debt relief to consumers plus an additional $15 million to the attorneys general, and imposes injunctive reforms including loan 'off ramps,' enhanced pre-purchase and pre-loan disclosures, dealer monitoring, and a seven-year price cap at 109% of retail book value. Note: this is a consumer-lending enforcement action, not a data privacy matter; the 'dark_patterns' category is the closest available fit for the deceptive add-on sales allegations.

CriticalDark Patterns

$694.0M

COSettlement

Sares Regis Group

Colorado Attorney General Phil Weiser announced a settlement with Sares Regis Group, a Denver-metro property management company, after an investigation found it told prospective tenants that rental subsidies and housing vouchers were not accepted at its properties, in violation of the Colorado Anti-Discrimination Act and the Colorado Consumer Protection Act. Under the settlement, the company must adopt written source-of-income policies, train leasing employees, submit a compliance report to the AG's office, and refrain from misrepresenting its voucher acceptance, and it pays $30,000 to the Housing Rights Initiative. Note: this is a fair-housing enforcement action, not a privacy matter, so no privacy violation taxonomy categories apply.

Low

$30K

NJSettlementMultistate

Credit Acceptance Corporation (CAC)

New Jersey's Attorney General and Division of Consumer Affairs, along with 41 Attorneys General, reached a $694 million settlement with subprime auto lender Credit Acceptance Corporation over allegations it originated unaffordable loans its own systems predicted borrowers could not repay, employed aggressive debt-collection tactics, and failed to prevent deceptive vehicle-service contract and GAP product 'packing' by dealers. The multistate settlement stepped in after the CFPB permanently dropped its 2023 enforcement action against CAC in 2025. CAC will provide $60 million in cash restitution, $634 million in debt relief, an additional $15 million to the states, and implement injunctive lending reforms including loan off ramps, pre-loan disclosures, add-on packing safeguards, and a seven-year vehicle price cap. Note: this is a consumer-protection lending enforcement action, not a privacy matter; violation categories are best-fit mappings from the available taxonomy.

CriticalDark PatternsNotice Failure

$694.0M

VAConsent DecreeMultistate

Credit Acceptance Corporation

Virginia and 40 other state attorneys general settled with subprime auto lender Credit Acceptance Corporation (CAC) for $694 million in cash restitution and debt relief. The settlement resolves allegations that CAC originated loans it knew or should have known consumers could not afford, and that it encouraged and failed to prevent dealers from unlawfully 'packing' auto-loan contracts with unwanted Vehicle Service Contracts and GAP products. The Consent Judgment was filed September 17, 2026, with the City of Richmond Circuit Court.

Critical

$694.0M

VAGuidance

No respondent entity (consumer advisory announcement)

Virginia Attorney General Jay Jones announced that Governor Spanberger's declaration of a state of emergency due to prolonged, severe drought has triggered Virginia's anti-price gouging statutes, making it unlawful to charge unconscionable prices for necessary goods and services. A price is unconscionable if it grossly exceeds the price charged during the ten days immediately prior to the emergency. No entity was charged or fined; the release is a consumer advisory explaining how to report suspected price gouging to the Attorney General's Consumer Protection Section.

Low
MNSettlementMultistate

Credit Acceptance Corporation

Minnesota AG Keith Ellison and a bipartisan coalition of 41 state attorneys general reached a settlement with subprime auto lender Credit Acceptance Corporation requiring it to pay the states $75.5 million and forgive more than $630 million in consumer debt nationwide. The settlement resolves allegations that the company financed auto loans it knew or should have known consumers could not afford, and financed the sale of expensive add-on products that consumers did not know they were purchasing. The company must also fundamentally reform its lending practices, including risk disclosures, loan balance waivers for high-risk defaults, and enhanced consent and cancellation protections for add-on products.

CriticalConsent Failure

$75.5M

ORSettlementMultistate

Credit Acceptance Corporation

Oregon Attorney General Dan Rayfield announced a $694 million multistate settlement with Credit Acceptance Corporation (CAC), a subprime auto lender, resolving allegations that CAC originated unaffordable loans and allowed dealers to 'pack' unwanted Vehicle Service Contracts and Guaranteed Asset Protection products into consumer loans. The settlement provides $60 million in cash restitution, $634 million in debt relief, and injunctive reforms including off ramps for risky loans, enhanced disclosures, and dealer monitoring.

CriticalConsent FailureNotice FailureDark Patterns

$694.0M

CTSettlementMultistate

Credit Acceptance Corporation

Connecticut Attorney General William Tong joined 40 other state attorneys general in a settlement with Credit Acceptance Corporation (CAC), one of the nation's largest subprime auto lenders, resolving allegations that CAC originated loans it knew or should have known consumers could not afford and encouraged or failed to prevent dealers from 'packing' CAC loans with unwanted Vehicle Service Contract (VSC) and GAP products. The settlement, announced September 17, 2026 and effective November 2, 2026, directs $694 million in cash restitution and debt relief to consumers, plus an additional $15 million to the states, and imposes injunctive lending reforms. Note: this is a consumer-protection/lending enforcement action rather than a data privacy matter; the violation categories are best-fit mappings to the available taxonomy.

CriticalDark PatternsNotice Failure

$694.0M

NYSettlement

DARCARS of Railroad Avenue, Inc. (DARCARS Lexus) and MT Kisco Automotive, LLC (DARCARS BMW)

New York Attorney General Letitia James secured a settlement with two Mt. Kisco car dealerships, DARCARS Lexus and DARCARS BMW, that deceptively charged a two percent 'sales commission' fee that was optional, provided no consumer benefit, and was never paid to the salesperson, and that misleadingly bundled a low-value aftermarket product ('DARCARS Assurance') into sales and lease agreements as if it were mandatory. The dealerships will pay more than $1.17 million in consumer refunds (with potentially millions more through a claims process) plus $700,000 in penalties. They must clearly disclose all future fees and add-ons, are banned from selling DARCARS Assurance or similar junk bundles at any New York dealership, and must conduct annual fair-business-practices training for all employees.

MediumDark PatternsNotice Failure

$700K

COSettlement

Corporate Certificates, LLC and FL UCC Statement Service, LLC

Colorado Attorney General Phil Weiser announced a settlement with Corporate Certificates, LLC and FL UCC Statement Service, LLC resolving allegations that the companies mailed marketing materials to Colorado businesses designed to look like official government invoices, without the statutorily required disclaimers and with purported deadlines implying a legal duty. Under the stipulated consent judgment, the companies will pay $150,000 in refunds and fees and permanently cease all operations in Colorado. The companies had ignored prior warning notices and stopped operating in Colorado in August 2025 after the AG obtained a preliminary injunction.

MediumDark PatternsNotice Failure

$150K

CTNew Law

N/A - General advisory to Connecticut businesses and consumers (no specific entity)

Connecticut Attorney General William Tong issued an advisory that newly enacted privacy laws take effect October 1, 2026, including Public Act 26-64 (SB4), which amends the Connecticut Data Privacy Act, and Public Act 26-15 (SB5), which established the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act). The new laws regulate surveillance pricing, facial recognition technology, genetic data collected by direct-to-consumer testing companies, a ban on the sale of precise geolocation data, a data broker registry, AI use in employment decisions, and chatbots offered to children. No enforcement action was taken; this is prospective guidance alerting consumers and businesses to new rights and compliance requirements.

LowSurveillance PricingBiometric DataHealth Data
FTCGuidance

Automobile industry (auto dealers) - no named respondent; industry-wide guidance publication

FTC staff published FAQs on price transparency to help the automobile industry comply with the FTC Act, reiterating that an advertised vehicle price must be the actual price any consumer can pay, excluding only government-required charges. The guidance follows warning letters the FTC sent to 97 auto dealership groups earlier in 2026 and signals continued litigation against dealers that advertise one price but charge more through undisclosed fees. No specific entity was charged and no penalty was imposed.

LowDark Patterns
NYCoalitionMultistate

Not applicable (no company named - coalition letter to U.S. Congress re: Digital Asset Market Clarity Act)

New York Attorney General Letitia James led a bipartisan coalition of 17 other state attorneys general in sending a letter to Congress opposing the Digital Asset Market Clarity Act, warning that the bill would preempt state attorneys general authority to combat cryptocurrency fraud and scams. This is a legislative advocacy action, not an enforcement action against any company, and no penalties or remedies were imposed. The coalition urged Congress to preserve state enforcement power over both tokenized and non-tokenized securities and state crypto registration regimes.

Low
CTSettlementMultistate

Abbott Laboratories

Connecticut joined 39 other states and the federal government in a $384 million False Claims Act settlement with Abbott Laboratories over allegations that the company failed to manufacture powder infant formula and nutritional therapy products in compliance with federal and state requirements at its Sturgis, Michigan, and Casa Grande, Arizona facilities. Abbott allegedly manufactured formula in conditions that risked microorganism contamination and failed to disclose contamination test results to the FDA during 2019 and 2022 inspections. The settlement resolves claims that Abbott caused false claims to be submitted to the WIC program and state Medicaid programs between January 1, 2018, and December 31, 2022.

CriticalSecurity FailureNotice FailureRecord Retention

$384.2M

CTCoalitionMultistate

Digital Asset Market Clarity Act (proposed federal legislation — no enforcement target entity)

Connecticut Attorney General William Tong joined a bipartisan coalition of 16 other state attorneys general in sending a letter to the U.S. Senate Banking Committee opposing the Digital Asset Market Clarity Act, warning it would preempt state authority to protect investors from cryptocurrency fraud and scams. The coalition urges Congress to preserve state enforcement, registration, and federal-state cooperation roles over digital assets. This is a legislative advocacy action, not an enforcement action — no entity was charged, no violations were found, and no penalty was imposed.

Low

Explore Enforcement Data