Privacy and consumer protection enforcement actions tracked from official Virginia Attorney General sources.
Official enforcement page22
Total Actions
$420.4M
Total Fines
Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta, with $353 million guaranteed for Virginia, resolving a child-safety lawsuit brought by a multistate coalition against the social media company. The settlement includes monetary relief and guardrails aimed at protecting children on Meta's platforms.
$353.0M
Virginia Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta joined by 52 states and U.S. territories, resolving claims that Meta deceived the public about addictive design features harming youth mental health and shared Facebook users' private information with third parties before the 2016 election. Virginia is guaranteed $353 million (with an additional $11 million for the data-sharing claims, bringing its total to $364 million). Meta must implement sweeping child-safety reforms on Instagram and Facebook, including age verification, daily time limits, and 'check in breaks,' with implementation and efficacy regularly assessed by an independent auditor.
$353.0M
Attorney General Jones, along with four other states and the FTC, sued Zillow and Redfin for an illegal agreement where Zillow paid Redfin $100 million to exit the multifamily rental advertising market and exclusively display Zillow's listings. The settlement requires the companies to restore competition, pay $2 million, and prohibits future anticompetitive agreements.
$2.0M
Attorney General Jay Jones and a coalition of 21 attorneys general obtained a temporary restraining order blocking the Trump administration from demanding a database of state-owned records containing sensitive personal information of 17 million commercial drivers from AAMVA. The lawsuits allege the federal agencies violated federal privacy laws and the Administrative Procedure Act by seeking to acquire the data without guardrails or public notice.
A coalition of 21 attorneys general and the Governor of Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, DHS, and AAMVA to prevent the federal government from obtaining a database of personal information of 17 million commercial driver's license holders. The lawsuits allege the federal government violated federal privacy laws and the Administrative Procedure Act by demanding the data without notice or guardrails, and threatening to withhold $10 million in federal funding if AAMVA refused.
Attorney General Jay Jones announced the creation of the Regulated Products Enforcement Unit to centralize civil enforcement for liquid nicotine products, THC and hemp-derived products, kratom, and related intoxicants. The unit will oversee compliance, directory administration, and public education. It will coordinate with Virginia ABC and other agencies to take legal action against violators.
Attorney General Jay Jones joined a coalition of 26 states to sue the Trump administration over unlawful conditions attached to counterterrorism and emergency funding. The conditions would require states to share voter data with DHS and assist in immigration enforcement, which the coalition argues violates the Administrative Procedure Act and the Spending Clause.
Virginia Attorney General Jay Jones joined a coalition of 42 state attorneys general in a multistate settlement with 23andMe over a 2023 data breach that exposed the genetic data of approximately 6.9 million customers. The settlement requires 23andMe to pay $18 million to the states and $46.75 million to affected consumers, resolving allegations of inadequate security practices and delayed breach notification.
$18.0M
Virginia Attorney General Jay Jones joined a bipartisan coalition of 13 attorneys general alleging that Nexstar and Tegna are violating a court's hold-separate order by allowing Nexstar personnel to remain on Tegna's Board of Directors during the merger litigation. The coalition seeks clarification of the order to ensure the companies operate independently while the antitrust case proceeds.
Attorney General Jay Jones joined 42 attorneys general in a multistate settlement with 23andMe's bankruptcy trustee over a 2023 data breach that compromised genetic data of nearly 7 million customers. The settlement includes $150 million in allowed claims, with immediate recovery of $18 million from bankruptcy funds, of which Virginia receives $662,649. The settlement also requires enhanced data security measures and consumer protections for the new entity, 23andMe Research Institute.
$663K
Block, Inc., the parent company of Cash App, agreed to a $45 million multistate settlement with 46 states for misleading consumers about the safety of Cash App and failing to protect users from fraud. The settlement requires Block to improve customer support, stop deceptive marketing, and fulfill legal obligations to investigate fraud and reimburse unauthorized transactions.
$45.0M
Virginia Attorney General Jay Jones announced a court ruling denying Meta Platforms, Inc.'s motion for summary judgment in a lawsuit alleging Meta designed Facebook and Instagram to addict children and misled parents. The court allowed claims under COPPA and the Virginia Consumer Protection Act to proceed to trial, scheduled for August 2026.
The Virginia Attorney General, as part of a multistate coalition, secured a court ruling allowing their case against Meta to proceed to trial. The case alleges that Meta designed and deployed harmful features on its platforms that addict children and teens, causing severe mental and physical detriment. The trial is scheduled for August.
Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.
The press release is a weekly roundup of Virginia Attorney General Jay Jones' activities, including updates on vape legislation, joining a 22-state coalition opposing a USPS firearm mailing proposal, filing emergency appeals to the U.S. Supreme Court regarding redistricting, commencement speeches, and Law Day events. No privacy-related enforcement actions are documented.
A coalition of 24 states led by Virginia Attorney General Jay Jones won a lawsuit against the Trump Administration, invalidating illegal tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade ruled the tariffs were unauthorized by law, as a trade deficit does not constitute the required 'large and serious balance-of-payment deficits' under the statute. The ruling prevents the administration from enforcing the 10% worldwide tariffs on most products.
Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.
Virginia Attorney General Jay Jones, leading a coalition of 33 other states, secured a jury verdict finding Live Nation and Ticketmaster liable for violating federal and state antitrust laws via anticompetitive conduct including monopolization of event ticketing services and large concert amphitheaters. The jury determined the companies suppressed competition, overcharged consumers, and forced artists to use their promotion services. Remedies and financial penalties will be determined at a subsequent bench trial.
Virginia Attorney General Jay Jones joined a bipartisan coalition of 44 state attorneys general in submitting a comment letter supporting a proposed U.S. Department of Labor rule to increase transparency requirements for pharmacy benefit managers (PBMs) servicing employer-funded ERISA health plans. The coalition urged the DOL to clarify that the proposed rule does not preempt existing state PBM transparency laws and to coordinate enforcement with state attorneys general. This action is a policy advocacy comment letter and does not constitute an enforcement action against any specific entity.
The Virginia Attorney General issued a consumer warning about predatory practices by tax debt settlement companies, referencing a past successful enforcement action against Wall & Associates, Inc. and CEO P. Mark Yates for violating the Virginia Consumer Protection Act. The Fauquier County Circuit Court ordered the company and CEO to pay over $1.6 million in civil penalties, with additional restitution to consumers pending determination.
$1.7M
Virginia Attorney General Jay Jones announced intent to enforce new provisions of the Virginia Consumer Data Protection Act that limit minors' social media usage to one hour per day without parental consent. The law, effective January 1, 2026, requires age verification and verifiable parental consent to change time limits, with potential penalties up to $7,500 per violation and injunctive relief. This follows a motion to dismiss a lawsuit by NetChoice challenging the law.
This press release announces Virginia's receipt of nearly $110 million from major tobacco companies under the 1998 Tobacco Master Settlement Agreement, a settlement resolving lawsuits against tobacco companies for deceptive marketing and consumer protection violations. The funds will support public health programs including the Virginia Healthcare Fund and Virginia Foundation for Healthy Youth. This document does not describe a privacy-related enforcement action.