Privacy and consumer protection enforcement actions tracked from official Virginia Attorney General sources.
Official enforcement page12
Total Actions
$47.4M
Total Fines
Attorney General Jay Jones joined 42 attorneys general in a multistate settlement with 23andMe's bankruptcy trustee over a 2023 data breach that compromised genetic data of nearly 7 million customers. The settlement includes $150 million in allowed claims, with immediate recovery of $18 million from bankruptcy funds, of which Virginia receives $662,649. The settlement also requires enhanced data security measures and consumer protections for the new entity, 23andMe Research Institute.
$663K
Block, Inc., the parent company of Cash App, agreed to a $45 million multistate settlement with 46 states for misleading consumers about the safety of Cash App and failing to protect users from fraud. The settlement requires Block to improve customer support, stop deceptive marketing, and fulfill legal obligations to investigate fraud and reimburse unauthorized transactions.
$45.0M
The Virginia Attorney General, as part of a multistate coalition, secured a court ruling allowing their case against Meta to proceed to trial. The case alleges that Meta designed and deployed harmful features on its platforms that addict children and teens, causing severe mental and physical detriment. The trial is scheduled for August.
Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.
The press release is a weekly roundup of Virginia Attorney General Jay Jones' activities, including updates on vape legislation, joining a 22-state coalition opposing a USPS firearm mailing proposal, filing emergency appeals to the U.S. Supreme Court regarding redistricting, commencement speeches, and Law Day events. No privacy-related enforcement actions are documented.
A coalition of 24 states led by Virginia Attorney General Jay Jones won a lawsuit against the Trump Administration, invalidating illegal tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade ruled the tariffs were unauthorized by law, as a trade deficit does not constitute the required 'large and serious balance-of-payment deficits' under the statute. The ruling prevents the administration from enforcing the 10% worldwide tariffs on most products.
Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.
Virginia Attorney General Jay Jones joined a bipartisan coalition of 44 state attorneys general in submitting a comment letter supporting a proposed U.S. Department of Labor rule to increase transparency requirements for pharmacy benefit managers (PBMs) servicing employer-funded ERISA health plans. The coalition urged the DOL to clarify that the proposed rule does not preempt existing state PBM transparency laws and to coordinate enforcement with state attorneys general. This action is a policy advocacy comment letter and does not constitute an enforcement action against any specific entity.
Virginia Attorney General Jay Jones, leading a coalition of 33 other states, secured a jury verdict finding Live Nation and Ticketmaster liable for violating federal and state antitrust laws via anticompetitive conduct including monopolization of event ticketing services and large concert amphitheaters. The jury determined the companies suppressed competition, overcharged consumers, and forced artists to use their promotion services. Remedies and financial penalties will be determined at a subsequent bench trial.
The Virginia Attorney General issued a consumer warning about predatory practices by tax debt settlement companies, referencing a past successful enforcement action against Wall & Associates, Inc. and CEO P. Mark Yates for violating the Virginia Consumer Protection Act. The Fauquier County Circuit Court ordered the company and CEO to pay over $1.6 million in civil penalties, with additional restitution to consumers pending determination.
$1.7M
Virginia Attorney General Jay Jones announced intent to enforce new provisions of the Virginia Consumer Data Protection Act that limit minors' social media usage to one hour per day without parental consent. The law, effective January 1, 2026, requires age verification and verifiable parental consent to change time limits, with potential penalties up to $7,500 per violation and injunctive relief. This follows a motion to dismiss a lawsuit by NetChoice challenging the law.
This press release announces Virginia's receipt of nearly $110 million from major tobacco companies under the 1998 Tobacco Master Settlement Agreement, a settlement resolving lawsuits against tobacco companies for deceptive marketing and consumer protection violations. The funds will support public health programs including the Virginia Healthcare Fund and Virginia Foundation for Healthy Youth. This document does not describe a privacy-related enforcement action.