Federal and state enforcement actions involving notice failure violations, tracked from official government sources.
233
Total Actions
$416.5M
Total Fines
11
Jurisdictions
Connecticut Attorney General William Tong announced a civil investigative demand into MediaLab.AI Inc., owner of the Kik Messenger app, over lax age assurance practices, content moderation, and child safety failures that advocates have dubbed a "predator's paradise." The action follows a July 2025 notice of violation under the Connecticut Data Privacy Act for privacy notice deficiencies and processing sensitive data — including health, biometric, and precise geolocation data — without proper consent, which the company has only partially addressed. The new investigation seeks records related to practices that may constitute unfair or deceptive acts or practices under the CTDPA and the Connecticut Unfair Trade Practices Act. No fine has been imposed to date.
CalPrivacy (the California Privacy Protection Agency) issued Enforcement Advisory 2026-01 warning data brokers that providing incorrect information in their annual registration with California's data broker registry carries liability of a $200 fine per day. The advisory observes that the Enforcement Division has already brought multiple enforcement actions over reporting errors, and emphasizes that accurate registry disclosures are what make the newly launched Delete Request and Opt-Out Platform (DROP) work for Californians. No specific company was named and no penalty was imposed by the advisory itself; it functions as forward-looking guidance.
New York Attorney General Letitia James secured a settlement with 425 Marcy, LLC and its principal Ezra Unger over the unlawful pre-sale of condominium units at 427 Marcy Avenue in Williamsburg before the required Martin Act offering plan was accepted for filing, and the misuse of $6.715 million in buyer down payments that were never placed in escrow. Unger agreed to repay residential buyers their down payments with interest or provide purchase credits, pay up to $824,000 in penalties, and is barred from selling securities in New York for six years. Note: this is a real estate offering-plan/escrow enforcement action rather than a data privacy matter; 'notice_failure' is the closest available taxonomy mapping (selling without the required offering plan disclosures).
$824K
Colorado Attorney General Phil Weiser announced a settlement with Avail Property Management Inc. and PK Management, LLC resolving allegations that the companies denied prospective tenants housing based on criminal history information prohibited under Colorado's Rental Application Fairness Act, including arrests, deferred judgments, and convictions older than five years (some more than 20 years old). The companies, which managed nearly 4,000 rental units across Colorado, relied on a third-party background screening service despite legal prohibitions. Under the settlement, they must change screening practices, review vendor recommendations rather than relying on them automatically, submit to two years of compliance reporting, and pay $300,000.
$300K
The New Jersey Attorney General and Division of Consumer Affairs announced that Match Group, Inc. will pay $650,000 and change its business practices to settle allegations that it misrepresented or failed to disclose its criminal background screening policies and practices to New Jersey users, violating the New Jersey Consumer Fraud Act and the Internet Dating Safety Act. Under a Consent Order, Match must accurately represent its screening policies, notify existing New Jersey members of updated disclosures within 150 days, and post clear and conspicuous disclosures and safety notifications about the limitations of criminal background screenings.
$650K
Minnesota Attorney General Keith Ellison announced that used car dealer Midwest Car Search and its owner Scott Spiczka agreed to reform their business practices and pay $100,000 to resolve allegations that they violated Minnesota's Used Car Law and other consumer-protection laws through five deceptive practices, including fake 'certified' claims, illegally added vehicle service contracts, denied warranties, missing Buyer's Guide disclosures, and operating under an unregistered trade name that exploited Spanish speakers. The settlement resolves the AG's April 23, 2024 lawsuit and makes permanent a prior court order requiring the dealer to cease the deceptive conduct. Note: this is a consumer-protection enforcement action, not a privacy matter, so violation-type mapping to the privacy taxonomy is approximate.
$100K
New York Attorney General Letitia James secured $400,000 from Thirty Madison, Inc., an online medication provider, for misleading consumers about auto-renewing subscriptions and making cancellation difficult. The company failed to clearly disclose subscription terms and non-refundable fees, and required multiple steps to cancel. The settlement requires payment, refunds to eligible subscribers, and changes to subscription practices.
$400K
Texas Attorney General Ken Paxton launched an industry-wide investigation into companies marketing avocado oil products that may contain undisclosed seed oils. Civil Investigative Demands were issued to Primal Kitchen, Siete Foods, and Chosen Foods, with more companies expected to be investigated for potential violations of the Texas Deceptive Trade Practices Act.
Colorado Attorney General Phil Weiser announced a settlement with Cobblestone Denver Opco, LLC (Cobblestone Car Wash) over allegations that the company used unfair automatic renewal practices for monthly membership fees. The company failed to provide proper disclosures, notices, terms, and cancellation options, locking over 70,000 consumers into auto-renewal contracts. Cobblestone will pay $1,353,465 in restitution, has already refunded $253,406 to consumers, and must comply with the Colorado Consumer Protection Act, including providing easy-to-access cancellation options and 25-day advance notice of price increases.
$1.4M
Connecticut Attorney General William Tong and the Federal Trade Commission announced a $4 million settlement with Manchester City Nissan (Chase Nissan LLC) resolving allegations that the dealership double-charged for 'certified pre-owned' vehicles and collected unauthorized junk fees. The settlement requires payment for consumer redress, prohibits misrepresentations, mandates clear disclosure of the maximum total price, and requires express informed consent for all charges.
$4.0M
The FTC and Connecticut secured a $4 million settlement with Chase Nissan LLC (doing business as Manchester City Nissan) over allegations the dealership charged consumers unauthorized fees, including double-charging for 'certified pre-owned' vehicles and inserting charges like total loss protection into financing agreements without consent. The settlement requires $4 million in consumer redress, prohibits misrepresentations about vehicle certification and warranties, mandates prominent disclosure of the maximum total vehicle price, and requires express informed consent for all charges.
$4.0M
The FTC announced it is seeking public comment on a proposed enforcement policy statement regarding personalized pricing, which is the use of personal data to set prices based on what a company believes an individual consumer is willing to spend. The statement warns that undisclosed collection or use of personal data for personalized pricing could violate the FTC Act's prohibition on unfair or deceptive practices. The Commission voted 2-0 to authorize the Federal Register notice.
A bipartisan coalition of 33 state attorneys general, led by Minnesota AG Keith Ellison, began trial against Meta Platforms, Inc., alleging the company knowingly designed and deployed harmful features on Facebook and Instagram that drive children and teens to use the platforms compulsively, while falsely assuring parents and the public that its platforms were safe for young users. The states also allege Meta illegally collected personal information from children under 13 without parental consent, violating COPPA. The trial opened before Judge Yvonne Gonzalez Rogers in the U.S. District Court for the Northern District of California, with the states seeking monetary penalties and injunctive relief.
Connecticut Attorney General William Tong announced a $275,000 settlement with TaxAct, an online tax preparation company, over allegations that between January 2018 and December 2022, TaxAct improperly disclosed detailed customer financial information to Meta and Google through third-party tracking technologies without notifying taxpayers. The settlement requires TaxAct to pay $275,000 and implement new third-party tracking compliance measures, including a review committee, written policies, a tag monitoring system, and two independent third-party audits.
$275K
A bipartisan coalition of state attorneys general led by New Jersey, California, Colorado, and Kentucky is taking Meta Platforms, Inc. to trial, alleging that Meta designed addictive features on Instagram and Facebook that harm minors' mental health, illegally collected data from children under 13 without the required protections under COPPA, and misled users about platform safety. Opening arguments begin August 18, 2026, in the U.S. District Court for the Northern District of California. No monetary penalty or final remedy has yet been imposed.
New York Attorney General Letitia James issued a statement marking the first day of trial in a multistate lawsuit against Meta, alleging the company knowingly designed addictive features on Facebook and Instagram that harm children's mental health. The coalition alleges Meta illegally collected personal information from children under 13 without parental consent, violating COPPA, and seeks monetary penalties, restitution, and an injunction against deceptive practices.
Attorney General Dan Rayfield and a coalition of 21 attorneys general and Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, and AAMVA to block demands for a database containing personal information of 17 million commercial drivers. The federal government threatened to withhold $10 million in funding unless the data was turned over, which the coalition argues violates privacy law.
Attorney General Phil Weiser joined a coalition of 22 attorneys general and Pennsylvania in filing two lawsuits against the Trump administration for demanding a database of state-owned records containing sensitive personal information of 17 million commercial drivers. The lawsuits allege violations of federal privacy laws and the Administrative Procedure Act, and seek an emergency order to prevent the data from being turned over by the August 17 deadline.
A coalition of 21 attorneys general and the Governor of Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, DHS, and AAMVA to prevent the federal government from obtaining a database of personal information of 17 million commercial driver's license holders. The lawsuits allege the federal government violated federal privacy laws and the Administrative Procedure Act by demanding the data without notice or guardrails, and threatening to withhold $10 million in federal funding if AAMVA refused.
A coalition of 21 state attorneys general and Pennsylvania filed lawsuits against the Trump Administration, DOT, FMCSA, DHS, and AAMVA to prevent the unlawful demand for a database containing personal information of 17 million commercial driver's license holders. The lawsuits allege violations of federal privacy laws and the Administrative Procedure Act, and seek an emergency order to block the data transfer.
Attorney General Tong and a coalition of 21 attorneys general and Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, and DHS to block demands for the personal information of 17 million CDL drivers. The lawsuits allege violations of federal privacy laws and the Administrative Procedure Act, and seek an emergency order to prevent the data transfer.
New York Attorney General Letitia James sued Healing for Heroes, a purported veterans' charity, for defrauding donors. The organization claimed to provide free outdoor retreats for disabled veterans but instead used donations for personal expenses and property improvements. The AG seeks to dissolve the organization, bar the leaders from soliciting funds, and impose civil penalties.
The California Privacy Protection Agency Board issued a decision and stipulated order requiring Iowa data broker LocateSmarter LLC to pay $116,490 and change its practices. The company failed to timely register as a data broker and unlawfully required Californians to provide the last four digits of their Social Security numbers before exercising opt-out rights, violating the CCPA's data minimization requirements. This is the first action against a data broker under both the CCPA and the Delete Act.
$116K
The FTC filed a complaint against Credit Glory LLC and related entities for deceptive credit repair practices, including false promises, impersonating debt collectors, charging illegal upfront fees, and using negative option billing without consent. A federal court temporarily halted the operation.
Minnesota Attorney General Keith Ellison reached a settlement with Stevens Community Medical Center (SCMC) over allegations that SCMC improperly calculated discounts required for uninsured patients with household incomes under $125,000, violating the Minnesota Hospital Agreement and state law. As a result, some uninsured patients were billed up to 20.5% more than allowed. SCMC must provide up to $1,412,776.25 in refunds or medical-debt reductions to potentially eligible patients.
$1.4M
Minnesota Attorney General Keith Ellison filed a settlement with Unlock Partnership Solutions, Inc. over allegations that its 'home equity agreements' were actually unlawful mortgage loans that violated Minnesota's predatory interest rate caps and disclosure requirements. Unlock agreed to pay $944,626 in monetary and debt relief, cease lending unless licensed, and comply with Minnesota mortgage laws.
$945K
Texas Attorney General Ken Paxton launched an investigation into the American Academy of Pediatrics (AAP) over concerns that the organization may be promoting and recommending childhood vaccines for financial gain. The AAP has been issued a Civil Investigative Demand to determine the basis of its vaccine recommendations and whether they are influenced by financial incentives from pharmaceutical donors.
Texas Attorney General Ken Paxton announced an investigation into major food manufacturers, including Frito Lay, Flora Food Group, and ACH Foods, over misleading 'heart healthy' labeling. The investigation will examine whether their advertising practices violate the Texas Deceptive Trade Practices Act by misrepresenting the health value of their products. Civil Investigative Demands have been issued to these companies.
Domuso, Inc., a rent payment processor, settled with the Colorado Attorney General for charging illegal surcharges on credit/debit card rent payments. The settlement requires Domuso to cap fees at 2%, end fee-sharing with properties, provide cost-free payment options, and pay $100,000. The company must also comply with Colorado's surcharge and junk fees laws.
$100K
The FTC, along with Utah and California, filed a complaint against Hims & Hers alleging the telehealth provider shared consumers' sensitive health information with third-party advertising platforms without consent, and deceived consumers about billing and cancellation practices. The complaint alleges violations of the FTC Act and the Restore Online Shoppers' Confidence Act.
Texas Attorney General Ken Paxton announced industry-wide investigations into feminine care and cosmetic product brands, including Tampax, Kotex, L., and LOLA, over potential deceptive trade practices related to undisclosed toxic chemicals and heavy metals in their products. The investigations focus on whether consumers were misled about product safety and ingredient composition under the Texas Deceptive Trade Practices Act.
New York Attorney General Letitia James secured $375,000 from 1-800-Flowers.com, Inc. for misleading consumers and enrolling them in automatically-renewing paid subscriptions without clear disclosure or consent. The settlement requires 1-800-Flowers to pay penalties, change its subscription practices, and provide refunds to eligible subscribers.
$375K
The FTC permanently banned Dennise Merdjanian from the debt relief industry and telemarketing after she and Superior Servicing LLC allegedly ran a student loan forgiveness scam that took more than $45.9 million from consumers. The proposed stipulated order imposes a partially suspended monetary judgment and resolves the FTC's litigation against the remaining defendants.
$45.9M
The FTC charged the founders of Celsius Network with deceiving consumers by falsely promising that cryptocurrency deposits were safe and always available. The founders agreed to pay $16.5 million and are banned from marketing or selling products that can be used to deposit or withdraw assets, among other restrictions.
$16.5M
The FTC finalized a settlement with Vanilla Chip LLC (doing business as TruHeight) and its principals over allegations that they deceptively advertised height-enhancing supplements for children and teenagers without competent and reliable scientific evidence. The FTC also alleged that TruHeight used fake social media bot profiles and relied on reviews written by employees, vendors, or consumers who received free products or discounts for 5-star reviews. Under the final order, TruHeight must pay $750,000 and is barred from making unsupported health claims or misrepresenting reviews.
$750K
Texas Attorney General Ken Paxton opened an investigation into LinkedIn Corporation over allegations that the company advertised and profited from fake or misleading job opportunities ("ghost jobs") on its platform. The investigation focuses on whether LinkedIn misled consumers who paid for Premium subscriptions by failing to disclose that a significant percentage of job postings may be inactive or not genuine hiring opportunities.
Attorney General Ellison and 48 other attorneys general called on the FCC to strengthen rules to cut off scammers' access to legitimate telephone numbers. The coalition is responding to the FCC's proposed rules to combat illegal robocalls and texts, which cost Americans nearly $2 billion last year.
Attorney General Jennifer Davenport joined a bipartisan coalition of 42 attorneys general in announcing a settlement with the bankruptcy trustee for 23andMe, resolving allegations from a 2023 data breach that compromised genetic data of 6.9 million people worldwide, including nearly 150,000 in New Jersey. The settlement provides $18 million to states from available bankruptcy funds, plus enhanced data security and consumer deletion rights for the successor entity, 23andMe Research Institute.
$18.0M
The FTC alleged that RentGrow, a tenant screening company, violated the FCRA by failing to use reasonable procedures to ensure the accuracy of its consumer reports, failing to disclose sources of data, and mishandling consumer disputes. RentGrow agreed to pay a $2.25 million penalty and is prohibited from further violations.
$2.3M
Minnesota Attorney General Keith Ellison reached a settlement with Annelle Soberay and Omega Dental Care, a defunct dental clinic that shut down in late 2024 without providing advance notice or transitional care to patients. The settlement allows consumers to obtain refunds from the Consumer Protection Restitution Account for fees paid for services that were never provided.
New York Attorney General Letitia James sued 3M, DuPont, and other chemical companies for knowingly causing decades of PFAS pollution through consumer products. The lawsuit alleges the companies hid toxicity risks, failed to warn the public, and seeks cleanup funding, damages, and injunctive relief.
New York Attorney General Letitia James and a bipartisan coalition of 45 other attorneys general secured $45 million from Block, Inc., the company behind Cash App, for misleading users about the platform's security and failing to protect them from fraud. The settlement requires Block to implement changes including maintaining live customer support, stopping misleading marketing, and fulfilling legal obligations to investigate fraud claims and reimburse users for unauthorized transactions.
$45.0M
Attorney General Phil Weiser announced a $45 million multistate settlement with Block, Inc., the company behind Cash App, for misleading consumers about the safety of the platform and failing to protect users from fraud. The settlement requires Block to implement antifraud measures, provide customer support, and stop deceptive marketing practices.
$45.0M
Attorney General Keith Ellison announced a $45 million multistate settlement with Block, Inc., the company behind Cash App. The settlement resolves allegations that Block misled consumers about the safety of Cash App, failed to protect users from fraud, and did not provide promised fraud protection and resolution. Block agreed to implement responsible practices including maintaining customer support, offering live support, stopping misleading claims, and fulfilling legal obligations to investigate fraud and reimburse users.
$45.0M
Block, Inc., the parent company of Cash App, agreed to a $45 million multistate settlement with 46 states for misleading consumers about the safety of Cash App and failing to protect users from fraud. The settlement requires Block to improve customer support, stop deceptive marketing, and fulfill legal obligations to investigate fraud and reimburse unauthorized transactions.
$45.0M
Attorney General Jennifer Davenport co-led a coalition of 49 attorneys general in calling on the FCC to strengthen rules to cut off scammers' access to legitimate telephone numbers. The coalition's letter requests stronger certification rules, regular reporting, and prohibitions on number cycling to combat illegal robocalls.
Block, Inc. agreed to a $45 million multistate settlement with 46 states for allegedly misleading consumers about the safety of Cash App, failing to protect users from fraud, and not providing promised fraud protection. The settlement requires Block to improve customer support, stop misleading claims, and educate consumers about fraud.
$45.0M
Attorney General Tong announced a $45 million multistate settlement with Block, Inc., the company behind Cash App, for misleading consumers about the safety of the platform, failing to protect users from fraud, and not providing promised fraud protection and resolution services. The settlement requires Block to implement major reforms including real customer support, transparent communications, and security commitments, and reaffirms Block's commitment to distribute between $75 million and $120 million to compensate consumers as part of a separate CFPB settlement.
$45.0M
Attorney General Ken Paxton secured a $45 million multistate settlement with Block, Inc. (Cash App) for misleading consumers about the safety of its platform and failing to protect users from fraud. The settlement requires Cash App to maintain 24-hour customer support, cease deceptive safety claims, and fulfill its legal duty to investigate and reimburse unauthorized transactions.
$45.0M
Minnesota Attorney General Keith Ellison, along with the FTC and attorneys general of Arizona, Illinois, Michigan, and Wisconsin, settled an antitrust lawsuit against John Deere. The settlement requires Deere to provide farmers and independent repair providers with the same repair resources previously only available to authorized dealers for 10 years, and to pay $1 million in legal costs.
$1.0M
The FTC and New York Attorney General took action against Handy Technologies for deceptive earnings claims and failure to disclose fees and fines that led to millions of dollars being withheld from workers' wages. The FTC is sending over $2.7 million in refunds to 62,893 affected consumers.
The FTC issued warning letters to seven companies for allegedly misrepresenting products as 'Made in the USA' when they were imported. The letters urge compliance with the FTC's Made in the USA standard. No monetary penalties were imposed.
Texas Attorney General Ken Paxton secured a settlement with Walmart over deceptive practices in its Spark Driver program. Walmart misrepresented driver pay, including failing to pass on customer tips and altering base pay after drivers accepted offers. The $13 million settlement provides direct payments to affected Texas drivers and requires Walmart to implement honest compensation practices.
$13.0M
Texas Attorney General Ken Paxton announced an investigation into StubHub for failing to deliver FIFA World Cup tickets that fans purchased. The investigation focuses on reports of 'ghost ticketing,' where sellers list tickets they do not possess, collect payment, and cancel when unable to deliver.
The FTC finalized an order against Publishing.com LLC and its principals for misleading consumers about potential earnings from self-publishing products. The company will pay $1.5 million and must substantiate future earnings claims, and is prohibited from making misrepresentations about refunds and endorsements.
$1.5M
The FTC alleged that Hopper, a travel booking app, charged consumers hidden and pre-selected fees (Tip and VIP Support) without their consent, and misrepresented the benefits of its VIP Support and Price Freeze services. Hopper agreed to pay $35 million for consumer redress and is prohibited from misrepresenting fees, with requirements to clearly disclose fees and total prices.
$35.0M
The FTC alleged that Amazon knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to identity theft victims whose personal information was used to commit fraud. Amazon agreed to pay a $2.25 million civil penalty and is required to comply with FCRA Section 609(e), provide notice to consumers, and contact victims who previously requested records since April 2024.
$2.3M
A Minnesota jury found home seller Chadwick Banken liable for violating the Minnesota Human Rights Act by targeting Muslim homebuyers in a deceptive contract for deed scheme. The scheme involved inflated prices, large down payments, and balloon payments designed to cause defaults, allowing Banken to keep payments and resell properties. Remedies including restitution will be determined at a later hearing.
The Colorado Attorney General settled with Unlock Partnership Solutions, Inc., which marketed home equity agreements that were determined to be consumer credit transactions subject to Colorado's Uniform Consumer Credit Code and Consumer Equity Protection Act. The company must comply with lending laws, rate caps, disclosures, and licensing, and pay $283,375 in restitution to 125 consumers, with additional payments expected.
The FTC sued the Genesis Tech enterprise and its owners for operating deceptive internet-based subscription schemes. The defendants allegedly misled consumers about subscription terms, billed without authorization, and made cancellation difficult. The court granted a temporary halt to the operations pending trial.
The FTC, along with Alaska, Iowa, Nebraska, and Texas, filed a lawsuit against WPATH alleging the organization made false and unsubstantiated claims about the necessity, safety, and effectiveness of pediatric medical transition services. The complaint alleges WPATH misled parents and children about medical consensus and failed to disclose serious side effects, in violation of the FTC Act.
Governor Sherrill and Attorney General Davenport announced coordinated executive actions to reduce and eliminate junk fees in New Jersey. The initiative includes an Executive Order directing state agencies to review industries for junk fees and an Enforcement Statement from the Division of Consumer Affairs explaining how junk fee practices may violate the New Jersey Consumer Fraud Act.
Minnesota Attorney General Keith Ellison joined a coalition of 20 attorneys general in suing the Trump administration over new federal contract terms intended to purge DEI. The lawsuit alleges the agencies violated the Administrative Procedure Act by failing to provide public notice or accept comments, exceeding legal authority, and imposing vague requirements that threaten severe penalties on contractors.
Texas Attorney General Ken Paxton appealed a Massachusetts federal court order that blocked his office from proceeding with a Texas lawsuit against ActBlue under the Texas Deceptive Trade Practices Act. The lawsuit alleges ActBlue misrepresented that it no longer accepted gift card donations. The appeal seeks to reverse the preliminary injunction.
Attorney General Ellison announced a $4.87 million multistate settlement with GS Labs for overcharging patients, charging unlawful administrative fees, and failing to deliver timely COVID-19 test results. The settlement includes $3.63 million in restitution to affected consumers and $1.25 million to the multistate group, along with injunctive relief if GS Labs resumes operations.
Minnesota Attorney General Keith Ellison filed a lawsuit against Bridge It, Inc. (doing business as Brigit) for violating Minnesota's payday lending laws. The lawsuit alleges Brigit operates as an unlicensed lender making short-term loans with APRs exceeding 300%, without disclosing rates or complying with state interest caps and disclosure requirements.
Colorado Attorney General Phil Weiser and a bipartisan coalition of 18 attorneys general announced a $4.87 million settlement with GS Labs, a former COVID-19 rapid testing business. The company was found to have violated the Colorado Consumer Protection Act by falsely advertising test results with no wait times, same day appointments, and no out-of-pocket expenses, while overcharging consumers and insurance providers.
$4.9M
Attorney General Phil Weiser joined a coalition of 20 attorneys general in suing the Trump administration over new federal contract terms that impose unclear requirements on contractors regarding diversity, equity, and inclusion (DEI). The lawsuit alleges the federal agencies violated the Administrative Procedure Act by failing to provide public notice or accept comments, exceeding their legal authority, and not adequately explaining the new requirements. The coalition seeks to enjoin the agencies from imposing the new contract terms.
The FTC finalized a consent order against Illuminate Education Inc. for failing to secure students' personal data, leading to a breach affecting 10.1 million students. The order requires Illuminate to implement a data security program, delete unnecessary data, and limit data collection, but imposes no monetary penalty.
The New Jersey Bureau of Securities filed a lawsuit against Xiao Hu (aka Mark Hu) and his companies Skyline Technology USA LLC and Thunderbirds.ME, Inc. for allegedly defrauding at least 15 investors out of $2.5 million through unregistered securities offerings. Hu allegedly misappropriated at least $280,000 for personal expenses including a home purchase and vacation, and falsely claimed to have a Ph.D. from Columbia University.
The FTC filed a complaint against National Amendment Assistance and related entities for allegedly deceiving homeowners into paying unlawful upfront fees for mortgage relief services falsely associated with the CARES Act. The court granted a temporary restraining order, and the FTC seeks redress for affected consumers.
The Federal Trade Commission is seeking public comment on a petition from X Corp., formerly known as Twitter, to set aside or modify its 2022 settlement order with the agency. The petition argues that the order no longer serves a valid regulatory purpose and that X Corp. has built a world-class privacy program. The Commission will vote after the comment period closes.
The FTC and State of Nevada settled charges against the operators of American Tax Service for impersonating federal and state government tax authorities and making false promises of tax debt relief. The defendants will surrender over $8 million in cash and assets and are banned from debt relief services, tax preparation, telemarketing, and impersonation.
$8.0M
A bipartisan coalition of state attorneys general began trial against Meta Platforms, Inc., alleging the company knowingly designed addictive features on Facebook and Instagram that harm children and teens, deceived parents about platform safety, and illegally collected personal information from children under 13 without parental consent in violation of COPPA. The states seek monetary penalties, an injunction to stop unlawful practices, and other relief. The trial is being litigated in the U.S. District Court for the Northern District of California.
New Jersey and New York Attorneys General announced an investigation into FIFA's ticketing practices for the 2026 World Cup. The investigation focuses on reports that fans were misled about seat locations, faced soaring prices due to variable pricing, and did not receive the tickets they paid for. Subpoenas have been sent to FIFA seeking information about its ticketing practices for matches hosted in New Jersey.
The Colorado Attorney General announced a major enforcement sweep targeting thousands of fraudulently filed businesses that used false information in Colorado registrations to facilitate scams including cryptocurrency fraud, investment fraud, and romance scams. The lawsuits seek court orders to dissolve these entities and the AG's office worked to take down associated websites.
The New Jersey Attorney General and Division of Consumer Affairs issued guidance warning hotels and short-term rental providers against charging hidden junk fees to consumers ahead of the 2026 FIFA World Cup. The guidance reminds businesses that New Jersey's consumer protection laws and the FTC's Unfair or Deceptive Fees Rule require transparent pricing and prohibit deceptive fee practices. No monetary penalties were imposed, but businesses are put on notice that violations may lead to enforcement actions.
The FTC alleged that Cox Media Group (CMG), MindSift LLC, and 1010 Digital Works LLC deceived customers by falsely claiming to offer an AI-powered 'Active Listening' service that could target ads based on conversations captured from consumers' smart devices, and that consumers had opted into such targeting. In reality, the service did not use voice data and consumers had not consented. The companies agreed to pay a total of $930,000 and are prohibited from making misrepresentations about their services, voice data collection, and consumer consent.
$930K
Texas Attorney General Ken Paxton launched an investigation into Meta regarding its Meta AI Glasses, alleging unlawful collection of facial biometric data, deceptive privacy representations, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses’ always-on recording mode lacks proper notice, subcontractors access private user content including intimate moments, and Meta plans to deploy facial recognition technology to collect unsuspecting individuals’ facial geometry. The AG issued a Civil Investigative Demand to determine if Meta violated Texas law by deceptively misrepresenting its data use practices.
Texas Attorney General Ken Paxton launched an investigation into Meta's Meta AI Glasses over allegations of unlawful facial biometric data collection, deceptive privacy practices, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses' always-on recording mode lacks proper user notice, planned facial recognition features would collect data without consent, and private user videos are accessed by third-party annotators in Kenya. The AG issued a Civil Investigative Demand to Meta to determine violations of Texas privacy laws.
The Colorado Attorney General shut down Smokin' Genie, a Fort Collins smoke shop owned by AIH Enterprises, LLC, and banned its owner from the industry for five years after the shop illegally sold kratom to a minor and failed to properly label kratom products. The settlement requires the store to cease operations, destroy inventory, and pay $200,000 if they violate the terms.
Shutterstock Inc. agreed to pay $35 million to settle FTC allegations that it charged consumers without their informed consent, failed to disclose auto-renewal and cancellation terms, and made cancellation difficult. The FTC alleged Shutterstock's subscription and on-demand pack offerings violated consumer protection laws through hidden fees and complicated cancellation processes.
$35.0M
California Attorney General Rob Bonta, along with multiple district attorneys and the California Privacy Protection Agency, announced a $12.75 million settlement with General Motors for illegally selling hundreds of thousands of Californians' location and driving data to data brokers Verisk and LexisNexis without notice or consent. The settlement includes the largest CCPA penalty to date, a five-year ban on selling driving data to consumer reporting agencies, and requirements to delete retained data and implement a robust privacy program.
$12.8M
The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.
The FTC filed a complaint and obtained a temporary restraining order against six defendants operating a deceptive health care scheme that impersonated government and insurance carriers to sell fake comprehensive health plans. The defendants allegedly charged consumers without express informed consent, failed to disclose material terms including cancellation processes, and misled consumers into paying for inadequate coverage that left many with substantial medical debt. The FTC seeks refunds for affected consumers and alleges violations of the FTC Act, Telemarketing Sales Rule, Impersonation Rule, and Gramm-Leach-Bliley Act.
The FTC filed a complaint against Innovative Partners in April 2026, alleging the operators impersonate the government and large insurance carriers to deceive consumers seeking health insurance into buying supposedly comprehensive PPO plans that do not offer the coverage they seek.
The FTC settled with Humor Rainbow, Inc. (operator of OkCupid) and Match Group Americas over allegations that OkCupid deceived users by sharing personal data including photos and location information with an unauthorized third party, contrary to its privacy policy promises to inform users and provide opt-out opportunities. The settlement permanently prohibits the companies from misrepresenting their data collection, use, disclosure, and privacy control practices. No monetary penalty was imposed.
Consumer fraud enforcement action where the FTC settled with Air AI for misleading entrepreneurs with false earnings and refund guarantees. The company will be banned from marketing business opportunities and pay a suspended $18 million judgment with $50,000 for consumer relief. Violations included failure to provide required disclosures and false claims under the Telemarketing Sales Rule and Business Opportunity Rule.
$18.0M
Consumer protection and civil rights lawsuit filed by Oregon AG and 20 other states against the U.S. Department of Agriculture over unlawful funding conditions that coerce states into complying with policies unrelated to nutrition programs. The conditions relate to immigration, DEI, and gender identity, and are alleged to violate the Spending Clause and Administrative Procedure Act. The suit seeks to block these conditions to protect billions in funding for programs like SNAP, WIC, and school lunches that serve vulnerable populations.
Consumer fraud enforcement action where the FTC settled with Xponential Fitness for violating the Franchise Rule by misrepresenting key information to franchisees, including time to open and costs. The settlement includes a $17 million monetary judgment for redress and prohibits future misrepresentations.
$17.0M
Connecticut Attorney General William Tong, joined by 17 other attorneys general, filed a lawsuit against the U.S. Department of Education to block new IPEDS data reporting requirements that demand student information disaggregated by race and sex. The coalition argues the rushed implementation is unlawful, invades student privacy, and risks unreliable data and baseless investigations. They seek an injunction to halt the data collection and protect student privacy.
Privacy enforcement action where Oregon AG and a coalition of 16 other states sue the Trump Administration to stop the Department of Education's new IPEDS data reporting requirements, arguing they jeopardize student privacy, lack proper definitions, and risk data errors and identification.
The California Privacy Protection Agency settled with PlayOn Sports for $1.10 million over CCPA violations, including failing to provide adequate opt-out mechanisms and improperly tracking users, particularly students. The company must implement proper opt-out methods, improve disclosures, and comply with children's data consent requirements.
$1.1M
The FTC and 11 states settled with Walmart for $100 million over deceptive earnings claims in its Spark Driver gig worker app, where drivers were misled about base pay, tips, and incentives. The settlement also addressed GLBA violations for failing to provide proper notice regarding the handling of drivers' financial information. Walmart must implement an earnings verification program and is banned from misrepresenting driver earnings.
$100.0M
Texas Attorney General Ken Paxton reached an agreement with Samsung Electronics America, Inc. to stop collecting Automated Content Recognition (ACR) data from smart TVs without consumers' express consent. Samsung must update its smart TVs to provide clear and conspicuous disclosures and obtain consent before any data collection, ensuring Texans are informed and in control of their viewing data.
The FTC issued a policy statement announcing it will not enforce COPPA against operators that collect age verification data under specific conditions. The policy aims to encourage the use of age verification technologies to protect children online. Operators must limit data use, ensure security, provide notice, and use accurate verification methods.
CalPrivacy sponsored AB 2021, the Whistleblower Protection and Privacy Act, introduced by Assemblymember Pilar Schiavo. The bill establishes whistleblower protections under the CCPA, including an award program and anti-retaliation provisions, to encourage insiders to report privacy violations.
Consumer fraud enforcement action where the FTC is distributing $23 million in refunds to investors defrauded by the Sanctuary Belize and Kanantik real estate schemes. The defendants deceived consumers about luxury amenities and resale potential, resulting in losses of over $100 million. This is the second round of refunds following a court judgment.
$22.9M
Consumer fraud case where the FTC sued JustAnswer LLC for deceiving consumers into enrolling in a costly recurring monthly subscription by falsely claiming low one-time fees. The company did not obtain affirmative consent or clearly disclose subscription terms, violating ROSCA and the FTC Act. The FTC seeks an injunction, consumer refunds, and civil penalties.
Consumer fraud investigation where the FTC is seeking information from 20 universities about whether sports agents are complying with the Sports Agent Responsibility and Trust Act (SPARTA), which requires disclosures to student athletes and notification to schools. The inquiry aims to ensure student athletes are protected from deceptive practices by agents.