Court Rules

Other Enforcement Actions

Privacy and consumer protection enforcement actions against other companies.

187

Total Actions

$260.4M

Total Fines

TX

Office of the Attorney General of Texas

Texas Attorney General Ken Paxton issued a consumer alert warning Texans about scams, fraudulent charities, and illegal price gouging related to severe flooding. The guidance provides resources for verifying charities and reporting suspected fraud or price gouging to the AG's office.

MN

Maduro Distributors, Inc.

The Minnesota Attorney General filed a lawsuit against Maduro Distributors, Inc. (doing business as Loon) for illegally manufacturing, distributing, and selling flavored vapes that appeal to minors, using flavors like 'Cotton Candy' and 'Blue Razz Slushy' and kid-friendly characters. The lawsuit also alleges Loon deceptively marketed its products as accepted for FDA approval when they were not. The state seeks a permanent injunction, civil penalties up to $25,000 per violation, restitution, and attorney fees.

Children's Data
CT

Glenmark

Attorney General William Tong led a coalition of 48 states and territories in a $29.6 million settlement with Glenmark, a generic drug manufacturer, to resolve allegations of a widespread conspiracy to artificially inflate prices, reduce competition, and unreasonably restrain trade for numerous generic prescription drugs. The settlement includes cooperation from Glenmark in ongoing multistate litigations and internal reforms to ensure fair competition and compliance with antitrust laws.

Surveillance Pricing

$29.6M

FTC

Vanilla Chip LLC

The FTC finalized an order against Vanilla Chip LLC (doing business as TruHeight) and its principals for deceptively advertising height-enhancing supplements for children and teens without scientific evidence. The company also used fake reviews and incentivized 5-star ratings. The order requires a $750,000 payment and prohibits false health claims and deceptive review practices.

Consent FailureNotice Failure

$750K

NY

3M Company

New York Attorney General Letitia James sued 3M, DuPont, and other chemical companies for knowingly causing decades of PFAS pollution through consumer products. The lawsuit alleges the companies hid toxicity risks, failed to warn the public, and seeks cleanup funding, damages, and injunctive relief.

Notice FailureConsent FailureHealth Data
NJ

Office of the Attorney General of New Jersey

Attorney General Jennifer Davenport co-led a coalition of 49 attorneys general in calling on the FCC to strengthen rules to cut off scammers' access to legitimate telephone numbers. The coalition's letter requests stronger certification rules, regular reporting, and prohibitions on number cycling to combat illegal robocalls.

Consent FailureNotice Failure
MN

Deere & Company

Minnesota Attorney General Keith Ellison, along with the FTC and attorneys general of Arizona, Illinois, Michigan, and Wisconsin, settled an antitrust lawsuit against John Deere. The settlement requires Deere to provide farmers and independent repair providers with the same repair resources previously only available to authorized dealers for 10 years, and to pay $1 million in legal costs.

Unauthorized Data SharingNotice Failure

$1.0M

NY

New York Attorney General

New York Attorney General Letitia James joined a bipartisan coalition of 48 other attorneys general in submitting comments to the FCC urging stronger rules to combat illegal robocalls. The coalition recommends expanding the definition of telephone number resellers, prohibiting resale of certain numbers, and requiring mandatory education for companies selling phone numbers. This is a regulatory advocacy action, not a direct enforcement action against a specific company.

Consent Failure
NY

New York Attorney General's Office

New York Attorney General Letitia James issued guidance to New Yorkers donating to Venezuela earthquake relief, warning about fraudulent charities and scams. The guidance provides tips on verifying charities, avoiding phishing, and reporting suspicious organizations.

FTC

Publishing.com LLC

The FTC finalized a settlement with Publishing.com LLC and its principals for misleading consumers about potential earnings from self-publishing products. The company will pay $1.5 million and is prohibited from making unsubstantiated earnings claims, failing to disclose refund terms, and misrepresenting endorsements and reviews.

Notice FailureConsent Failure

$1.5M

VA

Commonwealth of Virginia Office of the Attorney General

Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.

Geolocation Data
FTC

Federal Trade Commission

The FTC is seeking public comment on a proposed policy statement addressing concerns that AI companies may be manipulating AI system outputs contrary to consumer expectations for objectivity and accuracy. The statement explains that such conduct could be considered deceptive under Section 5 of the FTC Act. The public comment period runs until July 31, 2026.

AI/Automated Decisions
CT

State of Connecticut

Connecticut Attorney General William Tong announced that new amendments to the state's automatic renewal law took effect July 1, 2026. The law requires covered businesses to provide annual renewal reminders, offer easy cancellation options (including online or by email), and promptly process cancellation requests without obstruction. Non-compliance may be considered an unfair trade practice subject to investigation by the AG's office and the Department of Consumer Protection.

Consent FailureDark Patterns
MN

Cal-Maine Foods, Inc.

Attorney General Ellison secured a settlement with Cal-Maine Foods, Versova/Centrum, and Hickman's Egg Ranch for illegally coordinating to manipulate egg prices. The companies secretly communicated to influence a daily price index, artificially raising costs for consumers. The settlement includes 53 million donated eggs, $3.3 million in payments, and compliance measures.

Surveillance Pricing

$3.3M

NJ

State of New Jersey

Governor Sherrill and Attorney General Davenport announced coordinated executive actions to reduce and eliminate junk fees in New Jersey. The initiative includes an Executive Order directing state agencies to review industries for junk fees and an Enforcement Statement from the Division of Consumer Affairs explaining how junk fee practices may violate the New Jersey Consumer Fraud Act.

Notice FailureDark Patterns
FTC

Amare Global Holdings

The FTC filed a contempt motion against Amare Global Holdings, Shawn Talbott, Patrick Hintze, and Hiep Tran for allegedly violating a 2005 FTC order that prohibited Talbott from making unsubstantiated health claims. The motion alleges that the defendants marketed dietary supplements for children and adults with false claims about treating depression, anxiety, and ADHD, and misrepresented scientific evidence. The FTC seeks compensatory damages for consumers.

Consent FailureHealth Data
MN

Trump Administration

Minnesota Attorney General Keith Ellison joined a coalition of 20 attorneys general in suing the Trump administration over new federal contract terms intended to purge DEI. The lawsuit alleges the agencies violated the Administrative Procedure Act by failing to provide public notice or accept comments, exceeding legal authority, and imposing vague requirements that threaten severe penalties on contractors.

Notice Failure
CO

State of Maryland, et al. v. Hegseth, et al.

Attorney General Phil Weiser joined a coalition of 20 attorneys general in suing the Trump administration over new federal contract terms that impose unclear requirements on contractors regarding diversity, equity, and inclusion (DEI). The lawsuit alleges the federal agencies violated the Administrative Procedure Act by failing to provide public notice or accept comments, exceeding their legal authority, and not adequately explaining the new requirements. The coalition seeks to enjoin the agencies from imposing the new contract terms.

Notice Failure
CA

California Privacy Protection Agency

The California Privacy Protection Agency (CalPrivacy) joined a coalition of 18 Attorneys General and state agencies in opposing the proposed SECURE Data Act, a federal privacy bill that would preempt stronger state privacy laws like the CCPA. The coalition argues the bill would weaken consumer privacy protections, limit enforcement remedies, and undermine California's Delete Request and Opt-out Platform (DROP).

CPPA

California Privacy Protection Agency

The California Privacy Protection Agency announced that over 300,000 Californians have signed up for the Delete Request and Opt-out Platform (DROP) since its launch five months ago. The Data Broker Registry now includes 581 registered data brokers, the highest number since the registry was established in 2020. Beginning August 1, 2026, all data brokers will be required to access DROP and process deletion requests.

Data Broker Non-Compliance
FTC

American Tax Service (ATS)

The FTC and State of Nevada settled charges against the operators of American Tax Service for impersonating federal and state government tax authorities and making false promises of tax debt relief. The defendants will surrender over $8 million in cash and assets and are banned from debt relief services, tax preparation, telemarketing, and impersonation.

Notice Failure

$8.0M

NJ

FIFA

New Jersey and New York Attorneys General announced an investigation into FIFA's ticketing practices for the 2026 World Cup. The investigation focuses on reports that fans were misled about seat locations, faced soaring prices due to variable pricing, and did not receive the tickets they paid for. Subpoenas have been sent to FIFA seeking information about its ticketing practices for matches hosted in New Jersey.

Notice FailureConsent FailureDark Patterns
CO

Colorado Attorney General Phil Weiser

Attorney General Phil Weiser joined a bipartisan coalition of 43 attorneys general opposing the federal Kids Internet and Digital Safety Act (KIDS Act), arguing it would preempt state laws protecting children online and insulate Big Tech. The coalition supports the Senate version (KOSA) which includes a duty of care requirement and preserves state enforcement authority.

Children's Data
NJ

New Jersey Division of Consumer Affairs

The New Jersey Attorney General and Division of Consumer Affairs issued guidance warning hotels and short-term rental providers against charging hidden junk fees to consumers ahead of the 2026 FIFA World Cup. The guidance reminds businesses that New Jersey's consumer protection laws and the FTC's Unfair or Deceptive Fees Rule require transparent pricing and prohibit deceptive fee practices. No monetary penalties were imposed, but businesses are put on notice that violations may lead to enforcement actions.

Notice FailureConsent Failure
TX

Southern Poverty Law Center

Texas Attorney General Ken Paxton opened an investigation into the Southern Poverty Law Center (SPLC) over allegations that the organization deceived donors by using millions of dollars in contributions to fund extremist groups including the Ku Klux Klan, which it publicly claimed to oppose. The SPLC was indicted on federal fraud charges in April 2026 for secretly paying leaders of these groups without disclosing the payments to donors. The Texas OAG issued a Civil Investigative Demand to SPLC to probe deceptive donor solicititation and other potential violations of Texas law.

NY

No specific entity cited

New York Attorney General Letitia James issued a consumer alert on May 18, 2026, warning businesses against engaging in price gouging on transportation services during the Long Island Rail Road strike. The alert reminds businesses that New York’s price gouging laws prohibit unconscionable price increases on essential goods and services during market disruptions, with potential penalties of up to $25,000 per violation. No specific enforcement action against a particular entity was announced, only a general warning for businesses and a call for consumers to report suspected price gouging.

NY

N/A

New York Attorney General Letitia James issued a consumer alert on May 18, 2026, warning residents of potential price gouging by transportation service providers during the Long Island Rail Road strike. The alert reminds businesses that New York’s price gouging laws prohibit unconscionable price increases on essential services like transportation during market disruptions. No specific privacy violations or enforcement actions against individual entities were announced in the alert.

VA

None

The press release is a weekly roundup of Virginia Attorney General Jay Jones' activities, including updates on vape legislation, joining a 22-state coalition opposing a USPS firearm mailing proposal, filing emergency appeals to the U.S. Supreme Court regarding redistricting, commencement speeches, and Law Day events. No privacy-related enforcement actions are documented.

NJ

King Distribution LLC and 17 related retail businesses

New Jersey Attorney General Jennifer Davenport and the Division of Consumer Affairs announced a Consent Order with King Distribution LLC and 17 related retail smoke shops, resolving allegations that the companies illegally sold flavored vapor products in violation of New Jersey’s consumer protection laws. The Consent Order imposes a $100,000 civil penalty, requires reimbursement of $22,279 in investigation costs, and prohibits the companies from selling or distributing flavored vapor products in New Jersey. The enforcement action is part of New Jersey’s ongoing efforts to protect youth from flavored vape products, which have been permanently banned in the state since January 2020.

$100K

OR

No privacy enforcement target identified

The provided press release is a media release from the Oregon Department of Justice announcing a multistate press conference of attorneys general from Oregon, California, Washington, Nevada, and New York advocating for increased state resources to address antitrust enforcement gaps following reduced federal oversight. No privacy-related enforcement actions, violations, penalties, or remedies are described in the document.

CT

U.S. Food and Drug Administration (FDA)

On May 11, 2026, Connecticut Attorney General William Tong led a bipartisan coalition of 21 attorneys general in submitting a comment letter to the U.S. Food and Drug Administration (FDA) urging the agency to abandon draft guidance that would ease approvals for flavored e-cigarette products. The coalition argues the guidance ignores evidence that flavored e-cigarettes disproportionately drive youth addiction and that FDA has failed to enforce existing authorization requirements for e-cigarette products. The letter references past tobacco and e-cigarette enforcement actions, including the 1998 tobacco master settlement agreement and the 2022 $438.5 million settlement with JUUL Labs.

FTC

B.E.S.T. GDR LLC, d/b/a Premium Home Service

The FTC and State of Illinois, via the Department of Justice, filed a complaint against B.E.S.T. GDR LLC (d/b/a Premium Home Service) and its owner Yosef Bernath for creating thousands of fake home repair business listings with fabricated five-star reviews to deceive consumers. The defendants allegedly routed consumer calls to unqualified representatives, arranged for unlicensed technicians, and violated the FTC Act, Reviews and Testimonials Rule, Gramm-Leach-Bliley Act, and Illinois consumer protection laws. No monetary penalty has been imposed yet as the case is in initial filing stages.

VA

Trump Administration

A coalition of 24 states led by Virginia Attorney General Jay Jones won a lawsuit against the Trump Administration, invalidating illegal tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade ruled the tariffs were unauthorized by law, as a trade deficit does not constitute the required 'large and serious balance-of-payment deficits' under the statute. The ruling prevents the administration from enforcing the 10% worldwide tariffs on most products.

CT

None

Connecticut Attorney General William Tong praised final passage of House Bill 5312, which creates new civil enforcement mechanisms for deepfake digital sexual assault. The legislation allows the AG to pursue civil injunctions and penalties against platforms that disseminate illegal synthetic intimate images, including AI-generated child pornography, and establishes a private right of action for victims. The bill builds on prior Connecticut laws criminalizing unauthorized dissemination of intimate images.

Children's Data
OR

Trump Administration

Oregon Attorney General Dan Rayfield led a 24-state coalition in a lawsuit challenging the Trump Administration’s tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade granted summary judgment to the states, ruling the tariffs illegal as they did not meet the statutory requirement of “large and serious balance-of-payment deficits.” The court invalidated the 10 percent tariffs on most global products, barring their enforcement.

FTC

N/A (workshop announcement, not enforcement)

This is a press release announcing a workshop co-hosted by the FTC and the Institute for Consumer Financial Choice (ICFC) on May 14-15, 2026, focusing on developments in the financial services marketplace. No enforcement action, fine, or violation is involved.

CT

Made-in-China

Connecticut Attorney General William Tong announced a settlement with international trade platform Made-in-China to cease all U.S. sales of unlawful 'research grade' GLP-1 weight loss drugs following an investigation into direct sales to consumers without prescriptions or medical oversight. The settlement prohibits the platform from hosting GLP-1 sales to U.S. customers, requires a monitoring system to remove non-compliant listings, and imposes a $300,000 penalty suspended after an initial $30,000 payment. Additional settlements were announced with Radiance Medspa and Advanced Medical Weight Loss over compounded non-FDA approved GLP-1 drugs.

$300K

NY

N/A

This press release announces New York Attorney General Letitia James leading a coalition of 21 state attorneys general, the District of Columbia, and Pennsylvania’s Governor in filing an amicus brief with the U.S. Supreme Court to stay a Fifth Circuit ruling that would reinstate in-person dispensing requirements for mifepristone, a medication used for abortion. The coalition argues the ruling is scientifically unsupported, would restrict telehealth access to reproductive care, and undermines state sovereignty over abortion policy post-Dobbs. This is not a privacy-related enforcement action, as the content addresses reproductive health policy rather than data privacy violations.

CA

California Privacy Protection Agency

The California Privacy Protection Agency Board voted to support two bills (AB 1542 and SB 1106) and took a 'support if amended' position on a third bill (AB 883). These bills aim to strengthen privacy protections by expanding sensitive data protections, improving deletion rights under the Delete Act, and providing expedited deletion for elected officials and judges.

CT

Office of the Attorney General William Tong

Connecticut Attorney General William Tong issued a statement on May 1, 2026, following final passage of bipartisan legislation to combat youth social media addiction and regulate artificial intelligence harms. The legislation imposes new requirements on social media companies regarding minor users, including parental consent for addictive algorithms, default privacy settings, and annual reporting obligations. It also establishes rules for AI chat bots and automated employment decision tools, including disclosure requirements and self-harm detection protocols.

Children's DataAI/Automated Decisions
CT

Eversource

Connecticut Attorney General William Tong filed a brief on April 29, 2026, urging the Public Utilities Regulatory Authority (PURA) to reject Eversource’s request for $340 million in interest payments on nearly $1 billion in unvetted storm costs from 2018 to 2023. This press release does not describe a privacy-related enforcement action, as no data privacy violations are alleged, and no final enforcement action has been taken against Eversource. The matter involves utility cost recovery and regulatory advocacy, not privacy compliance.

CT

Bipartisan Coalition of 25 State Attorneys General and City of New York

On April 28, 2026, Connecticut Attorney General William Tong joined a bipartisan coalition of 24 other state attorneys general and New York City in sending letters to major credit card companies and payment processors urging them to block transactions facilitating illegal vaping product sales. The coalition highlighted that most vapor products lack required FDA authorization and many online sellers violate the federal Prevent All Cigarette Trafficking (PACT) Act, including failing to implement youth access safeguards. The coalition requested a meeting to discuss prohibiting noncompliant merchants from using payment networks, building on existing state enforcement actions against illegal vape sellers.

CA

California Privacy Protection Agency

The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.

Notice FailureOpt-Out FailureData Broker Non-Compliance
VA

Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.

Children's Data
FTC

Steven and Gina Merritt

The FTC settled allegations against Steven and Gina Merritt, high-level participants in the LifeWave MLM company, for making false and unsubstantiated earnings claims to recruit workers despite most LifeWave participants earning little to no money. The stipulated final order prohibits the Merritts from making deceptive earnings representations and requires them to notify their downline participants of the order's prohibitions. No monetary penalty was imposed.

CPPA

California Privacy Protection Agency

The California Privacy Protection Agency launched a statewide roadshow to promote its Delete Request and Opt-out Platform (DROP), which allows California residents to request deletion of their personal information from all registered data brokers in a single request. The roadshow aims to increase awareness of data privacy rights and the DROP tool, which data brokers are legally required to process starting August 1, 2026.

Data Broker Non-Compliance
CT

Consumer Financial Protection Bureau (CFPB)

On April 17, 2026, Connecticut Attorney General William Tong joined a coalition of 23 state attorneys general in sending a comment letter to CFPB Acting Director Russell Vought opposing the CFPB’s proposed strategic plan, which would drastically reduce agency staffing, weaken supervision of financial institutions, and curtail enforcement capacity. The coalition argues the plan would abdicate the CFPB’s statutory obligations, leave consumers vulnerable to fraud and scams, and shift enforcement burden to state agencies. The letter urges the CFPB to reverse course and maintain robust consumer protection efforts.

FTC

N/A

This press release announces the FTC's testimony before the Senate Commerce, Science and Transportation Committee on April 15, 2026, outlining the agency's priorities including consumer privacy protection, competition enforcement, and implementation of the TAKE IT DOWN Act. No specific enforcement action against a private entity is announced in this release.

FTC

TouchTunes Music Company, LLC; Americana Liberty LLC; Three Nations LLC; Oak Street Manufacturing Company, LLC

The FTC announced three separate settlements with companies making false 'Made in USA' claims: TouchTunes (electronic dartboards, $625k consumer redress), Americana Liberty and related parties (flags and flagpoles, $167,743 redress), and Oak Street Bootmakers (footwear, $75k redress). The companies violated the FTC Act, Made in USA Labeling Rule, and for Americana Liberty, the Textile Act and Rules, by making unqualified origin claims for products with significant imported components or wholly imported from China. Each settlement prohibits future misrepresentations of U.S. origin and requires consumer notices.

$868K

FTC

Stormy Wellington

The FTC settled allegations against Stormy Wellington, a high-level multilevel marketing (MLM) participant, for using false and unsubstantiated earnings claims to recruit new members for Total Life Changes and Farmasi MLMs. The stipulated final order prohibits Wellington from making deceptive earnings representations, requires written substantiation of all earnings claims, and mandates notification to her downline participants about the order’s prohibitions. No monetary penalty was imposed.

FTC

Federal Trade Commission

The Federal Trade Commission (FTC) announced it submitted a draft Advance Notice of Proposed Rulemaking (ANPRM) regarding online food delivery service fees to the Office of Management and Budget (OMB) for review on April 10, 2026. The ANPRM is classified as a 'significant regulatory action' under Executive Orders 12866 and 14215, requiring review by OIRA before public issuance. This press release does not describe an enforcement action against a private entity, nor any privacy-related violations or penalties.

FTC

StubHub Holdings, Inc.

The FTC settled charges with StubHub Holdings, Inc. for violating the FTC Act and the FTC’s Rule on Unfair or Deceptive Fees by failing to disclose total ticket prices including all mandatory fees up-front on its website. StubHub will pay $10 million, which will be used to provide refunds to eligible consumers who purchased live event tickets between May 12 and 14, 2025. The stipulated final order also prohibits StubHub from misrepresenting pricing, fees, or material transaction facts, and requires full compliance with the Fees Rule’s disclosure requirements.

$10.0M

NJ

NCL Bahamas, Ltd.

New Jersey Attorney General Jennifer Davenport announced a multistate settlement with NCL Bahamas, Ltd. (Norwegian Cruise Line) resolving allegations of deceptive sales practices and unfair cancellation, refund, and future cruise credit policies during the COVID-19 pandemic. The settlement requires NCL to pay $2 million to participating states, implement employee training and management approval processes for sales communications during disasters, and prohibits deceptive sales statements and prioritizing sales over consumer health and safety. NCL has already issued over $3 billion in refunds and future cruise credits to consumers nationwide related to the underlying allegations.

$2.0M

FTC

Innovative Partners

The FTC filed a complaint against Innovative Partners in April 2026, alleging the operators impersonate the government and large insurance carriers to deceive consumers seeking health insurance into buying supposedly comprehensive PPO plans that do not offer the coverage they seek.

Notice Failure
OR

U.S. Department of Agriculture

Consumer protection and civil rights lawsuit filed by Oregon AG and 20 other states against the U.S. Department of Agriculture over unlawful funding conditions that coerce states into complying with policies unrelated to nutrition programs. The conditions relate to immigration, DEI, and gender identity, and are alleged to violate the Spending Clause and Administrative Procedure Act. The suit seeks to block these conditions to protect billions in funding for programs like SNAP, WIC, and school lunches that serve vulnerable populations.

Notice Failure
FTC

Federal Trade Commission

On March 20, 2026, FTC Chairman Andrew N. Ferguson directed FTC staff to form a Healthcare Task Force to coordinate healthcare enforcement and advocacy efforts. The task force will focus on targeted enforcement initiatives, agencywide investigation strategies, amicus opportunities, and identifying emerging enforcement priorities. It will also seek partnerships with other federal agencies including HHS and DOJ to advance healthcare competition and consumer protection.

OR

Trump Administration

Health enforcement action: Attorney General Rayfield led a coalition of 22 states and D.C. to secure a federal court order blocking the Trump Administration from threatening to cut off Medicare and Medicaid funding to healthcare providers that offer gender-affirming care to youth with gender dysphoria. The court ruled the administration's actions unlawful, protecting access to care and upholding the right to make personal healthcare decisions.

OR

U.S. Environmental Protection Agency

Environmental enforcement action where Oregon Attorney General Dan Rayfield, along with a coalition of states and cities, filed a lawsuit challenging the EPA's unlawful rescission of the 2009 Endangerment Finding on greenhouse gas emissions. The challenge argues that the rescission ignores scientific evidence and legal precedent, threatening public health and environmental protections.

Security Failure
FTC

Xponential Fitness

Consumer fraud enforcement action where the FTC settled with Xponential Fitness for violating the Franchise Rule by misrepresenting key information to franchisees, including time to open and costs. The settlement includes a $17 million monetary judgment for redress and prohibits future misrepresentations.

Notice Failure

$17.0M

NJ

Ibelis Gonzalez

Ibelis Gonzalez, a 46-year-old Jersey City resident, was indicted on charges including second-degree theft by deception, second-degree impersonation/theft of identity, and third-degree false government documents. She is alleged to have used fake identification to obtain debit cards in six victims' names, stealing approximately $86,840 from their bank accounts between May and June 2024. The case is being prosecuted by the New Jersey Division of Criminal Justice, with potential maximum fines of $150,000 for second-degree charges and $15,000 for third-degree charges.

OR

Trump Administration

Consumer protection enforcement action where Oregon Attorney General Dan Rayfield led a coalition of 24 states in filing a motion for a preliminary injunction to stop the Trump Administration's imposition of tariffs on imported goods. The states argue the tariffs are unlawful under the International Emergency Economic Powers Act and Section 122 of the Trade Act of 1974, as they cause financial harm to consumers and state governments by increasing prices and procurement costs.

MA

U.S. Department of Education

Massachusetts Attorney General Andrea Campbell co-led a coalition of 17 attorneys general in filing a lawsuit against the Trump Administration to stop new data reporting requirements for colleges and universities through IPEDS. The requirements demand detailed student data disaggregated by race and sex, retroactive for seven years, which the coalition argues jeopardizes student privacy and could lead to baseless investigations.

Student Data
CT

Department of Education

Connecticut Attorney General William Tong, joined by 17 other attorneys general, filed a lawsuit against the U.S. Department of Education to block new IPEDS data reporting requirements that demand student information disaggregated by race and sex. The coalition argues the rushed implementation is unlawful, invades student privacy, and risks unreliable data and baseless investigations. They seek an injunction to halt the data collection and protect student privacy.

Student DataNotice Failure
IL

U.S. Department of Education

Illinois Attorney General Kwame Raoul, joined by 16 other attorneys general, filed a lawsuit against the U.S. Department of Education to stop new data collection requirements under IPEDS that threaten student privacy by requesting sensitive personal information including income, test scores, and GPA.

Student Data
CA

U.S. Department of Education

California Attorney General Rob Bonta filed a lawsuit against the U.S. Department of Education to block the expansion of IPEDS data collection requiring colleges to submit race-linked student data. The lawsuit argues the demand is arbitrary, capricious, and burdensome, and could enable costly partisan investigations. A multistate coalition co-led the challenge.

Student Data
OR

Department of Education

Privacy enforcement action where Oregon AG and a coalition of 16 other states sue the Trump Administration to stop the Department of Education's new IPEDS data reporting requirements, arguing they jeopardize student privacy, lack proper definitions, and risk data errors and identification.

Unauthorized Data SharingNotice FailureSecurity Failure
FTC

None

The FTC is seeking public comment on an Advance Notice of Proposed Rulemaking (ANPRM) to amend the Negative Option Rule, which governs prenotification negative option marketing plans. The rulemaking aims to address deceptive or unfair practices including misleading disclosures, unauthorized billing, and difficult cancellation processes, following over 100,000 consumer complaints about negative option practices in the past five years. Comments will be accepted for 30 days after the ANPRM is published in the Federal Register.

NJ

Susaida Nazario

A former employee of the New Jersey Department of Children and Families was indicted for allegedly leaking confidential child protection case information in exchange for bribes. The defendant, Susaida Nazario, misused her access to provide case details to an unauthorized individual, compromising sensitive children's data.

Children's Data
CT

Aquarion Company

PURA preliminarily approved the sale of Aquarion Water Company to a new nonprofit Aquarion Water Authority, expected to double water rates. Attorney General Tong opposes the decision, citing loss of public oversight and high costs to consumers. The conversion removes PURA regulation, placing rate approvals under a board with no history of rejecting hikes.

OR

Trump Administration

Consumer protection lawsuit led by Oregon Attorney General Dan Rayfield, on behalf of a coalition of 24 states and two governors, challenging the Trump Administration's imposition of worldwide tariffs under Section 122 of the Trade Act of 1974. The suit alleges the administration is acting without legal authority, violating the Administrative Procedure Act and constitutional separation of powers, and causing immediate financial harm to American consumers and businesses through increased prices.

Consumer Fraud
MA

U.S. Department of Agriculture

Massachusetts Attorney General Andrea Campbell secured a preliminary injunction from the U.S. District Court blocking the Trump Administration's USDA from cutting off SNAP funding to states that refuse to turn over personal data of SNAP applicants and recipients. The court found USDA's proposed data protocol unlawful because it allowed sharing data with entities unrelated to federal benefits administration.

Unauthorized Data Sharing
IL

U.S. Department of Agriculture

Attorney General Raoul secured a court order preventing the U.S. Department of Agriculture from collecting SNAP applicants' and recipients' personal data without an agreed-upon protocol that restricts sharing with unrelated entities like the Department of Homeland Security. The court found that the USDA's proposed protocol would violate federal law by allowing data use for immigration enforcement, contrary to the intended purpose of SNAP.

Unauthorized Data Sharing
CA

U.S. Department of Health and Human Services

California Attorney General Rob Bonta sent a letter to the U.S. Department of Health and Human Services opposing a proposed rule that would eliminate model card requirements for AI tools in healthcare, warning that such rollbacks could lead to biased and unsafe healthcare decisions by reducing transparency.

AI/Automated DecisionsHealth Data
CA

U.S. Department of Agriculture

California Attorney General Rob Bonta secured a second preliminary injunction from the U.S. District Court for the Northern District of California blocking the Trump Administration's demand that states turn over personal data of SNAP applicants and recipients. The court found the USDA's proposed data protocol would allow sharing of state data with entities unrelated to federal benefits administration, violating federal law.

Unauthorized Data Sharing
OR

Devon T. Horace

Consumer protection case involving theft of charitable funds. Former Alberta Main Street president Devon T. Horace pleaded no contest to theft and falsifying business records, paid $85,080.95 in restitution, and was sentenced to probation and community service.

Security Failure
OR

U.S. Department of Health and Human Services and Centers for Disease Control and Prevention

Health enforcement case: Oregon Attorney General Dan Rayfield, along with a coalition of states, filed a lawsuit challenging the Trump Administration's overhaul of the childhood immunization schedule. The complaint alleges that HHS Secretary RFK Jr. and CDC officials bypassed federal law, ignored scientific evidence, and endangered children by demoting key vaccines from the recommended schedule. The states seek to declare the actions unlawful and enjoin the new policy.

CA

California Privacy Protection Agency (CalPrivacy)

CalPrivacy sponsored AB 2021, the Whistleblower Protection and Privacy Act, introduced by Assemblymember Pilar Schiavo. The bill establishes whistleblower protections under the CCPA, including an award program and anti-retaliation provisions, to encourage insiders to report privacy violations.

Notice FailureUnauthorized Data SharingConsent Failure
OR

Internal Revenue Service

Environmental and consumer protection enforcement action. Oregon Attorney General Dan Rayfield led a coalition of 16 states in filing an amicus brief supporting a lawsuit against the IRS. The challenge contests a new IRS rule that removes a key pathway (5% investment test) for wind and solar projects to qualify for federal clean energy tax credits. The states argue the rule is unlawful, arbitrary, will increase energy costs for families and businesses, and undermine state clean energy goals and investments.

OR

U.S. Immigration and Customs Enforcement

Civil rights enforcement action where Oregon Attorney General submitted evidence supporting a lawsuit against federal agents for excessive use of force and First Amendment violations during protests at the Portland ICE building. The AG urges the court to issue a preliminary injunction to stop unlawful crowd-control measures.

Security Failure
CPPA

California Privacy Protection Agency

The California Privacy Protection Agency (CalPrivacy) announced the appointment of Sabrina Boyson Ross as its first Chief Privacy Auditor and the formation of a new Audits Division. The division will conduct regulatory examinations of businesses to determine compliance with the California Consumer Privacy Act, and its findings may lead to enforcement referrals.

CA

California State Legislature

Senator Josh Becker introduced SB 923, the Expanding Privacy Rights Act, sponsored by CalPrivacy. The bill would expand the CCPA right to delete to include personal information obtained from third-party sources, and require businesses to provide multiple methods (e.g., webform) for submitting privacy requests.

CA

California Privacy Protection Agency (CalPrivacy)

The California Privacy Protection Agency (CalPrivacy) announced the launch of the Delete Request and Opt-out Platform (DROP) during Data Privacy Week. DROP allows Californians to submit a single request to delete their personal information from over 500 registered data brokers, as required by the Delete Act. The platform is free and has already seen over 176,000 sign-ups since January 1, 2026.

Data Broker Non-ComplianceOpt-Out Failure
NJ

N/A (General Warning to New Jersey Sellers)

New Jersey Acting Attorney General Jennifer Davenport and the Division of Consumer Affairs issued general guidance warning sellers against engaging in price gouging during a declared state of emergency ahead of a major winter storm. The guidance cites New Jersey’s price gouging law, which prohibits price increases exceeding 10% of pre-emergency prices for necessary goods and services during the emergency and 30 days after its termination. Violations carry civil penalties up to $10,000 for first offenses and $20,000 for subsequent offenses, with each individual sale counted as a separate violation.

OR

Ryan Tong

Consumer protection case involving charity fraud. A former Orangetheory Fitness instructor pleaded guilty to stealing charitable donations collected during workout classes between 2021 and 2024. He diverted over $24,000 intended for charities to his personal Venmo account to fund his cocaine habit. The Oregon DOJ and Multnomah County DA's Office pursued criminal charges and civil claims to secure restitution and prevent future charitable sector involvement.

NJ

Trump Administration

New Jersey, serving as co-lead of a 22-state coalition, filed a motion for summary judgment on January 22, 2026, seeking an expedited order to stop the Trump Administration from defunding the Consumer Financial Protection Bureau (CFPB) before March 2026. The states argue that defunding the CFPB would undermine federal and state consumer protection efforts, including states’ reliance on CFPB consumer complaint data and mortgage lending data for enforcement actions. This motion builds on a December 2025 lawsuit filed by the same coalition challenging the administration’s threats to withhold CFPB funding.

CA

U.S. Department of Justice

California Attorney General Rob Bonta joined a multistate coalition in filing an amicus brief opposing the U.S. Department of Justice's subpoena for patient records from University of Pittsburgh Medical Center related to gender-affirming care. The brief argues that the subpoena violates patient privacy, infringes on states' rights to regulate medicine, and exceeds DOJ's statutory authority.

Health DataChildren's Data
CA

U.S. Department of Health and Human Services

California Attorney General Rob Bonta, alongside attorneys general from New York, Colorado, Illinois, and Minnesota, filed a motion for preliminary injunction to continue blocking the Trump Administration's unlawful freeze of $10 billion in federal funding for child care and family assistance programs and to prevent broad data requests for personally identifiable information of millions of residents. The funding freeze targets five Democratic-led states without evidence of fraud, and the data requests are part of the challenged unlawful actions. A temporary restraining order was previously granted blocking these measures.

Unauthorized Data Sharing
OR

U.S. Department of Health and Human Services

Civil rights and health enforcement action where Oregon Attorney General Dan Rayfield, joined by 11 other states, sued the U.S. Department of Health and Human Services (HHS) over a policy that conditions federal health, education, and research funding on states' agreement to discriminate

CA

California Privacy Protection Agency

Press release announcing the appointment of Nicole Ozer to the California Privacy Protection Agency Board. No enforcement action is described.

FTC

Sports agents

Consumer fraud investigation where the FTC is seeking information from 20 universities about whether sports agents are complying with the Sports Agent Responsibility and Trust Act (SPARTA), which requires disclosures to student athletes and notification to schools. The inquiry aims to ensure student athletes are protected from deceptive practices by agents.

Notice Failure
MA

Trump Administration

Massachusetts Attorney General Andrea Campbell filed a motion to enforce a preliminary injunction against the Trump Administration's demands for personal data of SNAP recipients. The court previously blocked such demands, but the administration renewed its request, threatening to withhold funding. The AG seeks to ensure compliance with federal privacy laws and protect SNAP recipients' sensitive information.

Unauthorized Data SharingChildren's Data
OR

Federal Law Enforcement Agencies

Civil rights investigation by the Oregon Attorney General into an incident where federal agents shot two people in Portland, examining whether officers acted outside lawful authority and addressing concerns about a pattern of excessive force.

Security Failure
CT

Trump Administration

Attorney General William Tong joined a coalition of 21 states and D.C. in suing the Trump administration to prevent the defunding of the Consumer Financial Protection Bureau (CFPB). The lawsuit argues that the defunding is unlawful and would cripple consumer protection efforts and state enforcement capabilities. The coalition seeks a court order to ensure CFPB continues to receive funding and fulfill its duties.

OR

Consumer Financial Protection Bureau

Consumer protection case where Oregon AG sued the Trump administration to prevent defunding of the CFPB, arguing it would harm consumers and state enforcement efforts. The CFPB provides critical data and complaint handling for financial consumer protection.

CT

PFAS Manufacturers and Importers

Attorney General William Tong led a coalition of 15 attorneys general in submitting a comment letter to the EPA opposing the Trump Administration's proposal to roll back PFAS reporting requirements under the Toxic Substances Control Act. The coalition argues that the exemptions would shield most manufacturers from reporting critical information about PFAS chemicals, hindering efforts to protect public health and the environment.

Notice Failure
FTC

Illusory Systems, Inc.

The FTC has taken action against Illusory Systems, Inc. (doing business as Nomad) for failing to implement adequate data security measures, which led to a breach where hackers stole $186 million from consumers. The company is required to return the stolen funds and implement an information security program.

Security FailureData Breach

$186.0M

OR

Trump Administration

Environmental enforcement action: Oregon Attorney General Dan Rayfield joined a multistate lawsuit against the Trump Administration for unlawfully freezing federal funding approved by Congress for electric vehicle charging infrastructure. The freeze, implemented by the U.S. Department of Transportation, halts critical projects to modernize freight corridors, reduce pollution, and support EV adoption, including a $102 million Pacific Northwest project for medium- and heavy-duty trucks. The lawsuit seeks a court order to release the funds and allow states to proceed with Congressionally authorized projects.

OR

Trump Administration

Consumer protection case where Oregon Attorney General Dan Rayfield secured a federal court order blocking the Trump administration from imposing financial penalties on states for SNAP operations, ensuring that lawful permanent residents continue to receive benefits without disruption.

NJ

None

New Jersey Attorney General Matthew Platkin and the Division on Civil Rights (DCR) announced the adoption of comprehensive new rules codifying the prohibition against disparate impact discrimination under the New Jersey Law Against Discrimination (LAD). The rules, published in the New Jersey Register on December 15, 2025, clarify legal standards for disparate impact liability in employment, housing, public accommodations, financial lending, and contracting, including the use of artificial intelligence in employment contexts. The rules do not create new liability but provide clarity on existing LAD protections amid federal rollbacks of disparate impact standards.

OR

U.S. Department of Homeland Security

Other enforcement action: Oregon Attorney General Dan Rayfield, joined by 18 other states, sued the Trump Administration over its unlawful $100,000 fee for H-1B visa petitions. The lawsuit alleges that the policy violates the Administrative Procedure Act by exceeding congressional authority and bypassing required rulemaking procedures, harming educational institutions and employers.