New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules

Privacy Enforcement Tracker

1,711 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,711

Total Actions

16

Jurisdictions

$51.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
ORSettlementMultistate

Abbott Laboratories

Abbott Laboratories agreed to pay more than $384 million — including $977,558 to Oregon — to resolve allegations that it sold powder infant formula and nutritional therapy products made in unsafe manufacturing conditions to Medicaid and food assistance programs such as WIC between January 2018 and December 2022. Investigators found Abbott failed to maintain manufacturing equipment and control water at its Sturgis, Michigan, and Casa Grande, Arizona, facilities, and withheld test results showing contamination during FDA inspections in 2019 and 2022. The settlement was negotiated by the National Association of Medicaid Fraud Control Units on behalf of the federal government and 39 states.

CriticalSecurity FailureNotice Failure

$384.2M

MNCoalitionMultistate

Bipartisan Coalition of 16 State Attorneys General

Minnesota Attorney General Keith Ellison joined a bipartisan coalition of 16 attorneys general in a letter to U.S. Senate Banking Committee leaders opposing the Digital Asset Market Clarity Act, warning it would strip states of their ability to combat cryptocurrency scams and fraud. The letter cites over $10 million in crypto scam losses by Minnesotans in 18 months and urges Congress to preserve state registration regimes and enforcement authority. No company was charged and no penalty was imposed; this is legislative advocacy rather than an enforcement action.

Low
COSettlement

Sahansila Karki and Gokul Tiwari

Colorado Attorney General Phil Weiser announced a $152,000 settlement with smoke shop owners Sahansila Karki and Gokul Tiwari for selling kratom products that exceeded the legal potency limit and failed to meet labeling and packaging requirements. The settlement requires compliance with the Colorado Consumer Protection Act and the Daniel Bregger Act, product testing, documentation of purchases, and payment of $152,000, with an additional $500,000 due if the terms are violated.

MediumNotice Failure

$152K

TXEnforcement Action

TikTok

A Texas state district court (Judge Cory Liu) has found TikTok liable for lying to parents about the safety of its platform and for exposing children to inappropriate and explicit content, making Texas the first state in the nation to hold TikTok liable on these claims. The court found that although TikTok claimed it would remove graphic videos depicting drugs, nudity, alcohol, injuries, and profanity, such videos remained accessible to minors, even under 'Restricted Mode.' No penalty has been imposed yet; Attorney General Paxton will proceed to trial, expected next month, where relief and penalties will be determined.

HighChildren's DataNotice Failure
VACoalitionMultistate

Federal Communications Commission

Virginia Attorney General Jay Jones, joined by a bipartisan coalition of 48 other attorneys general, sent a letter urging the FCC to strengthen its 'Know Your Upstream Provider' (KYUP) rules to keep illegal robocalls off the U.S. phone network. The coalition asks the FCC to mandate baseline vetting measures for upstream providers, add monitoring triggers, strengthen STIR/SHAKEN caller ID authentication, establish base penalties, and require retention of KYUP data. No company was fined in this action; it is regulatory advocacy that builds on the Anti-Robocall Multistate Litigation Task Force's Operation Robocall Roundup, which sent warning letters to 37 voice providers.

Low
MNSettlement

Minnesota Valley Cooperative Light and Power Association

Minnesota Attorney General Ellison reached a settlement with Minnesota Valley Cooperative Light and Power Association resolving allegations of deceptive and unfair practices, including disconnecting a customer's electricity despite the customer's need for life-sustaining medical equipment and failing to properly notify customers of consumer protections or offer appropriate payment plans. Under the consent judgment, the cooperative must provide separate disconnection notices, offer written payment plans, maintain records for AG oversight, and forgive amounts owed by the affected consumer.

LowNotice Failure
FTCGuidance

Federal Trade Commission

The FTC rescinded its 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices, which had purported to apply the Health Breach Notification Rule to health apps and connected devices that collect consumer health information. The rescission follows the Commission's 2024 update to the Health Breach Notification Rule, which already covers health apps and connected devices like fitness trackers, and implements an executive order directing agencies to eliminate obsolete guidance documents. No company was charged or penalized; this is a deregulatory action.

Low
NYSettlement

VGW Holdings Pty. Ltd.

New York Attorney General Letitia James secured an $8 million settlement from VGW Holdings Pty. Ltd. and its affiliates for unlawfully operating online sweepstakes casinos — Chumba Casino, Global Poker, and Luckyland Slots — that allowed New Yorkers to play casino games with virtual coins exchangeable for cash or prizes. The OAG's June 2025 cease and desist letter stopped the company from offering virtual coin gambling in New York, and Governor Hochul signed a formal ban on sweepstakes casinos into law in December 2025. Under the settlement, VGW will pay $8 million in disgorgement, penalties, and costs; note this is an illegal-gambling enforcement action rather than a privacy matter, so no privacy violation taxonomy categories apply.

High

$8.0M

MNEnforcement Action

C4D, LLC

Minnesota Attorney General Keith Ellison filed a lawsuit in Hennepin County against C4D, LLC, its owners Travis Benoit and Steven Legatt, and related entity Five Points Properties, LLC, alleging 18 counts of violating the Minnesota Human Rights Act, federal lending laws, and state consumer-fraud and contract-for-deed laws. The complaint alleges the defendants sold homes through predatory contracts for deed with inflated prices, hidden finance charges, and large annual balloon payments that leave buyers immediately underwater and forfeit all equity upon default, while targeting Somali-American Muslims on the basis of religion and national origin — a form of 'reverse redlining.' The AG seeks an injunction, civil penalties, and cancellation or reformation of existing contracts; no penalty amounts have been determined.

Low
FTCSettlement

Humboldt Merchant Services

The FTC alleged that payment processor Humboldt Merchant Services knowingly processed payments for more than 1,000 shell merchant entities serving as fronts for fraudulent companies engaged in unauthorized billing scams, despite red flags including chargeback rates nearly 10 times higher than card-brand thresholds. Under the proposed stipulated order filed in the U.S. District Court for the Eastern District of Michigan, Humboldt will pay $12 million for consumer redress and is permanently banned from processing payments for merchants with a heightened risk of potential fraud.

CriticalConsent Failure

$12.0M

CTInvestigation

MediaLab.AI Inc.

Connecticut Attorney General William Tong announced a civil investigative demand into MediaLab.AI Inc., owner of the Kik Messenger app, over lax age assurance practices, content moderation, and child safety failures that advocates have dubbed a "predator's paradise." The action follows a July 2025 notice of violation under the Connecticut Data Privacy Act for privacy notice deficiencies and processing sensitive data — including health, biometric, and precise geolocation data — without proper consent, which the company has only partially addressed. The new investigation seeks records related to practices that may constitute unfair or deceptive acts or practices under the CTDPA and the Connecticut Unfair Trade Practices Act. No fine has been imposed to date.

LowChildren's DataConsent FailureNotice Failure
ORCoalitionMultistate

Federal Communications Commission

Oregon Attorney General Dan Rayfield, leading a bipartisan coalition of 48 other state and territorial attorneys general, sent a letter urging the FCC to strengthen its 'Know Your Upstream Provider' (KYUP) rule so phone companies must properly vet, continuously monitor, and cut ties with upstream providers that facilitate illegal robocalls and caller ID spoofing. The coalition asks the FCC to set minimum vetting standards, require periodic re-checks rather than one-time contract reviews, strengthen caller ID authentication across the call chain, impose meaningful penalties, and mandate record-keeping for investigators. No fine or injunction was imposed; the letter notes Americans received more than 29.6 billion scam robocalls and texts last year and lost nearly $2 billion to these scams.

Low
FTCSettlement

Nuvei Corporation

The FTC charged Canada-based payment processor Nuvei Corporation and its subsidiaries with knowingly processing payments for fraudulent merchants, including more than $30 million in payments for the Reimage tech support scam from 2017 to 2023, as well as merchants making false earnings claims and impersonating government tax authorities. Under the stipulated order filed in the U.S. District Court for the District of Arizona, Nuvei will pay $4.85 million for consumer redress, is banned from serving tech support telemarketers, and must implement robust merchant screening and chargeback monitoring practices. Note: this is a payments-fraud facilitation action under the FTC Act and Telemarketing Sales Rule, not a data privacy violation.

High

$4.8M

FTCGuidance

N/A (no entity named - agency policy announcement)

The FTC announced a seven-day extension of the public comment period on its proposed enforcement policy statement regarding personalized pricing, pushing the deadline from Sept. 18, 2026 to Sept. 25, 2026. Personalized pricing refers to using personal data to set prices based on what the company believes an individual consumer is willing to spend. This is a procedural announcement about draft agency guidance, not an enforcement action against any company, and no entity was named, no violation found, and no penalty imposed.

LowSurveillance Pricing
CPPAGuidance

Data brokers (unspecified - advisory applies to all businesses registered with California's data broker registry)

CalPrivacy (the California Privacy Protection Agency) issued Enforcement Advisory 2026-01 warning data brokers that providing incorrect information in their annual registration with California's data broker registry carries liability of a $200 fine per day. The advisory observes that the Enforcement Division has already brought multiple enforcement actions over reporting errors, and emphasizes that accurate registry disclosures are what make the newly launched Delete Request and Opt-Out Platform (DROP) work for Californians. No specific company was named and no penalty was imposed by the advisory itself; it functions as forward-looking guidance.

LowData Broker Non-ComplianceNotice Failure
NYSettlement

425 Marcy, LLC

New York Attorney General Letitia James secured a settlement with 425 Marcy, LLC and its principal Ezra Unger over the unlawful pre-sale of condominium units at 427 Marcy Avenue in Williamsburg before the required Martin Act offering plan was accepted for filing, and the misuse of $6.715 million in buyer down payments that were never placed in escrow. Unger agreed to repay residential buyers their down payments with interest or provide purchase credits, pay up to $824,000 in penalties, and is barred from selling securities in New York for six years. Note: this is a real estate offering-plan/escrow enforcement action rather than a data privacy matter; 'notice_failure' is the closest available taxonomy mapping (selling without the required offering plan disclosures).

MediumNotice Failure

$824K

CTGuidance

Hyperliquid

Attorney General William Tong issued a consumer alert warning Connecticut residents about unregulated, offshore decentralized finance (DeFi) cryptocurrency exchanges, naming GMX, Gains Network, dYdX, Aevo, Drift Protocol, Vertex Protocol, and Hyperliquid. The alert highlights risks including bypassing U.S. law via VPNs, predatory leverage up to 250x, misleading synthetic asset products, and lack of KYC protections. No enforcement action or penalty was imposed; at least one Connecticut consumer reportedly lost $200,000 deposited with an unregulated DeFi exchange.

LowDark PatternsSecurity Failure
MNSettlement

Omega Dental Care

Minnesota Attorney General Keith Ellison announced the first round of restitution, issuing 8 refund checks totaling $38,634 to consumers harmed by Omega Dental Care, a defunct Eden Prairie dental clinic owned and operated by Anne Soberay. The refunds, paid from the state's Consumer Protection Restitution Account (CPRA), compensate consumers who paid out of pocket for dental services that were never provided. The refunds follow an earlier settlement between the AG's office and Omega Dental Care and Soberay. Note: this is a consumer protection (non-delivery of services) action, not a privacy enforcement action; no privacy violation types from the taxonomy apply.

Low
NYGuidance

N/A (no company named - general consumer alert about unidentified scammers)

New York Attorney General Letitia James issued a consumer alert (not an enforcement action) warning New Yorkers about scammers exploiting confusion from recent federal changes to student loan repayment programs, including the elimination of the SAVE plan and phase-out of income-driven repayment plans. The alert describes common scam tactics — upfront fees, false guarantees of loan forgiveness, manufactured urgency, demands for powers of attorney, and requests for federal student aid (FSA) credentials — and urges consumers to report scams to the OAG. No company was named, no violation was alleged against a specific entity, and no penalty was imposed.

Low
NYGuidance

Unidentified student loan scammers (no specific entity named)

New York Attorney General Letitia James issued a consumer alert warning borrowers about scammers exploiting recent federal changes to student loan repayment programs, including the elimination of the SAVE plan and phase-out of income-based plans. The alert provides tips for borrowers, including refusing upfront fees, never granting powers of attorney to unknown parties, and never sharing Federal Student Aid login credentials. No specific company was named and no penalties or remedies were imposed; this is an advisory alert, not an enforcement action.

Low
COSettlement

Avail Property Management Inc. and PK Management, LLC

Colorado Attorney General Phil Weiser announced a settlement with Avail Property Management Inc. and PK Management, LLC resolving allegations that the companies denied prospective tenants housing based on criminal history information prohibited under Colorado's Rental Application Fairness Act, including arrests, deferred judgments, and convictions older than five years (some more than 20 years old). The companies, which managed nearly 4,000 rental units across Colorado, relied on a third-party background screening service despite legal prohibitions. Under the settlement, they must change screening practices, review vendor recommendations rather than relying on them automatically, submit to two years of compliance reporting, and pay $300,000.

MediumNotice FailureUnauthorized Data Sharing

$300K

CPPAAdministrative Order

SalesIntel Research, Inc.

The California Privacy Protection Agency Board issued a Decision and Final Stipulated Order requiring Virginia-based data broker SalesIntel Research, Inc. to pay a $36,400 fine for operating as a data broker without registering by the 2025 deadline under the Delete Act. SalesIntel sells consumer personal information, including more than 200 million professional contacts and de-anonymized website traffic data, for targeted advertising. In addition to the fine, the company must post privacy rights metrics on its website, integrate with CalPrivacy's Delete Request and Opt-out Platform (DROP), and process future deletion requests through that system.

LowData Broker Non-Compliance

$36K

TXInvestigation

TriWest Healthcare Alliance Corp.

Texas Attorney General Ken Paxton opened an investigation into TriWest Healthcare Alliance Corp., the U.S. government contractor that administers the VA Community Care Network and the Defense Health Agency's TRICARE West Region, over reports that it wrongfully denied health care claims by falsely treating insureds as having other health insurance (OHI). The OAG has issued Civil Investigative Demands (CIDs) and plans to interview consumers and employees to determine whether TriWest violated the Texas Deceptive Trade Practices Act. No findings or penalties have been imposed yet.

LowHealth Data
NJConsent Decree

Match Group, Inc.

The New Jersey Attorney General and Division of Consumer Affairs announced that Match Group, Inc. will pay $650,000 and change its business practices to settle allegations that it misrepresented or failed to disclose its criminal background screening policies and practices to New Jersey users, violating the New Jersey Consumer Fraud Act and the Internet Dating Safety Act. Under a Consent Order, Match must accurately represent its screening policies, notify existing New Jersey members of updated disclosures within 150 days, and post clear and conspicuous disclosures and safety notifications about the limitations of criminal background screenings.

MediumNotice Failure

$650K

NJSettlementMultistate

Glenmark, Lannett, Bausch, Apotex, Heritage, and Emcure

New Jersey and a coalition of states and territories obtained preliminary approval for a plan to distribute funds from settlements with generic drug manufacturers accused of conspiring to raise drug prices. The settlements total approximately $96.5 million, and eligible consumers may submit claims for compensation.

Critical

$96.5M

FTCEnforcement ActionMultistate

Amazon.com, Inc.

Colorado Attorney General Phil Weiser joined the FTC and 22 state attorneys general in filing a lawsuit against Amazon for manipulating the auctions used to set advertising prices, replacing actual auction results with higher prices since 2019 and overcharging nearly 1.2 million U.S. advertising customers. The FTC estimates total improper surcharges from 2018 to 2026 exceed $20 billion, with costs ultimately passed to shoppers through higher prices. The states seek a permanent injunction and monetary relief; no penalty has been imposed yet as this is a newly filed complaint.

CriticalSurveillance Pricing
TXEnforcement ActionMultistate

Amazon.com, Inc.

Texas Attorney General Ken Paxton sued Amazon.com, Inc. on August 31, 2026, alleging Amazon deceived advertisers by claiming to run second-price auctions while secretly applying hidden surcharges and undisclosed 'soft reserve' prices that pushed winners' costs up by roughly 17% on ordinary days and more than 25% during peak events like Prime Day. The hidden surcharges generated roughly $4.5 billion in additional nationwide revenue in 2024, and more than 18,000 Texas sellers and vendors advertise on the platform. The State brings claims under the Texas Deceptive Trade Practices Act, seeking civil penalties of up to $10,000 per violation, an injunction against inaccurate auction descriptions, and per-auction pricing records for every Texas advertiser; the FTC and a coalition of other states filed a parallel federal action the same day.

HighDark Patterns
NYEnforcement ActionMultistate

Amazon.com, Inc.

New York Attorney General Letitia James, joined by 21 other states and the FTC, sued Amazon for secretly overcharging its advertising customers more than $20 billion by submitting fake second-place bids to inflate ad auction prices since 2018. More than 1.2 million advertisers, including hundreds of thousands of small businesses, were allegedly overcharged. The coalition seeks a court order stopping the scheme plus penalties, restitution, and damages.

CriticalDark PatternsSurveillance Pricing
NJEnforcement ActionMultistate

Amazon

On August 31, 2026, New Jersey Attorney General Jennifer Davenport and the Division of Consumer Affairs joined the FTC and a bipartisan coalition of 21 other states in suing Amazon, alleging that for over seven years the company secretly rigged its advertising auctions—converting advertised 'second price' auctions into first-price auctions with hidden 'soft reserve price' surcharges—overcharging more than 500,000 small- and medium-sized businesses and extracting tens of billions of dollars. The complaint alleges Amazon actively concealed the surcharges, gave false and misleading answers to advertisers who asked directly about the auction format, and applied inflated upcharges on high-volume shopping days like Prime Day and Black Friday. The lawsuit was just filed; no penalties or remedies have been imposed yet.

CriticalSurveillance Pricing
MNSettlement

Midwest Car Search

Minnesota Attorney General Keith Ellison announced that used car dealer Midwest Car Search and its owner Scott Spiczka agreed to reform their business practices and pay $100,000 to resolve allegations that they violated Minnesota's Used Car Law and other consumer-protection laws through five deceptive practices, including fake 'certified' claims, illegally added vehicle service contracts, denied warranties, missing Buyer's Guide disclosures, and operating under an unregistered trade name that exploited Spanish speakers. The settlement resolves the AG's April 23, 2024 lawsuit and makes permanent a prior court order requiring the dealer to cease the deceptive conduct. Note: this is a consumer-protection enforcement action, not a privacy matter, so violation-type mapping to the privacy taxonomy is approximate.

MediumNotice FailureDark Patterns

$100K

Explore Enforcement Data