Court Rules
All enforcement actions
SettlementMedium Risk

NY AG Settles Saturn for $650K Over Minor Privacy Violations

Saturn TechnologiesMarch 7, 2025New York Attorney General

Penalty Amount

$650,000

Summary

Saturn Technologies, developer of the Saturn app for high school students, failed to verify users' age and school affiliation, allowing unauthorized interactions and mishandling contact data. The settlement requires a $650,000 penalty and mandates privacy enhancements, including better verification, data deletion, and improved settings for minors.

Remedy

Saturn Technologies must pay $650,000 in penalties, notify users of verification changes, provide enhanced privacy options for users under 18, delete retained contact book copies, limit visibility of non-user information, allow teachers to block their personal identifiers, and refrain from unsubstantiated safety claims.

Monetary PenaltyConsent DecreeCompliance ProgramData DeletionCorrective Notice

Violation Types

Entity Details

Entity

Saturn Technologies

Also known as: Saturn

Industry

Social Media

Official Sources

Related Enforcement Actions

NY

U.S. Department of Education

New York Attorney General Letitia James, joined by 16 other states, sued the U.S. Department of Education over a new survey requiring colleges to submit extensive student data, arguing it violates the Administrative Procedure Act and threatens student privacy. The lawsuit seeks to block the mandate and prevent penalties for non-compliance.

NY

Instacart

New York Attorney General Letitia James sent a letter to Instacart demanding information about its algorithmic pricing practices after a study revealed significant price differences for the same products. The AG warns that Instacart may be violating the New York Algorithmic Pricing Disclosure Act by failing to clearly disclose the use of personal data for price setting.

NY

OrthopedicsNY, LLP

$500K

New York Attorney General Letitia James secured a $500,000 settlement from OrthopedicsNY, LLP for failing to implement reasonable data security practices, which led to a cyber-attack stealing sensitive personal and health information of over 650,000 patients and employees. The settlement imposes penalties, requires funding for credit monitoring, and mandates enhanced security measures including multi-factor authentication and encryption.

NY

Illuminate Education, Inc.

$5.1M

Illuminate Education, Inc. experienced a data breach in 2022 that exposed personal information of millions of students due to inadequate security measures. A multistate investigation by New York, California, and Connecticut Attorneys General resulted in a $5.1 million settlement requiring Illuminate to enhance cybersecurity practices and pay penalties.

NY

Wojeski & Company

$60K

New York Attorney General Letitia James announced a settlement with accounting firm Wojeski & Company for failing to secure customer data, resulting in two data breaches that exposed personal information of over 4,700 New Yorkers. The firm delayed breach notification for over a year and had unauthorized employee access to data, leading to a $60,000 penalty and mandatory cybersecurity improvements.

NY

American Family Mutual Insurance Company/Midvale Indemnity Company, Farmers Insurance, Hagerty Insurance Agency, The Hartford Insurance Group, Infinity Insurance Company, Liberty Mutual Insurance, Metromile, State Auto Mutual Insurance Company

$14.2M

New York Attorney General Letitia James secured $14.2 million in settlements from eight car insurance companies for failing to protect consumers' personal information. The companies' inadequate cybersecurity allowed hackers to steal driver's license numbers and other data through online quoting tools, impacting over 825,000 New Yorkers. The settlements require the companies to pay penalties and implement enhanced data security measures.