Court Rules

Privacy Enforcement Tracker

1,285 enforcement actions from 14 federal and state jurisdictions. Every event traced back to its official government source.

1,285

Total Actions

14

Jurisdictions

$35.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NYCoalitionMultistate

American Express, Capital One, Citi Group, Mastercard, Visa, PayPal, Stripe, Sezzle, Block (operator of Square, Cash App, and Afterpay)

New York Attorney General Letitia James led a bipartisan coalition of 24 state attorneys general, Puerto Rico, and New York City in sending letters to nine major credit card companies and payment processors urging them to block transactions facilitating illegal vaping product sales. The coalition cites federal and state laws prohibiting unauthorized e-cigarette sales, particularly to youth, and requests collaboration to prevent payment networks from processing such transactions. No enforcement penalties or actions were imposed as part of this initiative.

Low
FTCEnforcement ActionMultistate

NERD Solutions Inc., ED REF Inc., Natalie Rodriguez, Pablo Ortiz

The FTC obtained a temporary restraining order against NERD Solutions Inc., ED REF Inc., and their operators Natalie Rodriguez and Pablo Ortiz, alleging they operated a deceptive student loan debt relief scheme that impersonated U.S. Department of Education officials and loan servicers to collect illegal upfront fees from consumers. The defendants are accused of violating the FTC Act, Telemarketing Sales Rule, Impersonation Rule, and Gramm-Leach-Bliley Act, having collected at least $8.8 million from affected consumers. The case is pending in the U.S. District Court for the Central District of California.

LowStudent Data
FTCWarning Letter

PayPal Holdings, Inc., Stripe, Inc., Visa Inc., Mastercard Inc.

FTC Chairman Andrew N. Ferguson issued warning letters to the CEOs of four major payment and financial infrastructure providers regarding concerns about debanking law-abiding customers based on political or religious views. The letters remind the companies of their obligations to customers under the FTC Act, warn that inconsistent denials of service could trigger investigations and enforcement, and reference President Trump’s 2025 executive order prohibiting debanking due to political affiliations, religious beliefs, or lawful business activities.

Low
NYSettlement

Wojeski & Company

New York Attorney General Letitia James settled with public accounting firm Wojeski & Company over two data breaches in 2023 and 2024 that exposed personal information of over 4,700 New York residents, including social security numbers and medical benefits. The firm failed to implement adequate data security measures, did not encrypt sensitive data, and delayed notifying affected consumers of the breaches for over a year. Wojeski must pay $60,000 in penalties and implement enhanced cybersecurity measures including encryption, incident response plans, and employee training.

LowData BreachSecurity FailureBreach Notification Delay

$60K

FLInvestigation

Robinhood Crypto, LLC.(Robinhood)

Florida Attorney General James Uthmeier launched an investigation into Robinhood Crypto, LLC for allegedly deceptive practices regarding trading costs. The AG issued a subpoena seeking internal documents to determine if Robinhood violated Florida's Deceptive and Unfair Practices Act by falsely claiming to offer the lowest crypto trading costs. Robinhood must respond by July 31, 2025.

Low
FTCSettlement

Financial Education Services (FES) d/b/a United Wealth Education, United Credit Education Services, Youth Financial Literacy Foundation

The FTC is distributing over $10.9 million in refunds to 443,048 consumers harmed by Financial Education Services (FES), a credit repair pyramid scheme that defrauded consumers through false promises of credit score fixes and illegal pyramid recruitment. The refunds follow a 2024 settlement with FES and its owners that banned them from fraudulent practices and required turnover of funds for consumer restitution.

Low
FTCSettlement

Financial Education Services

Consumer fraud enforcement against Financial Education Services for operating a credit repair pyramid scheme that defrauded consumers with false promises of easy credit fixes. The FTC secured a settlement in 2024 requiring $10.9 million in refunds to over 443,000 consumers and permanent bans on the operators.

Low

$10.9M

FTCWarning Letter

Five tax preparation companies(Tax Preparation Companies)

The FTC issued warnings to five tax preparation companies against using or disclosing consumer tax data for unrelated purposes like advertising without explicit consent. The agency cites its penalty offense authority, referencing a previous case against Beneficial Corp, and warns that such practices violate the FTC Act and could incur penalties up to $50,120 per violation. The notices highlight that using tracking technologies for data collection without consent is also prohibited.

LowConsent Failure
NJAdministrative OrderMultistate

Horatiu Charlie Caragaceanu, The Shark of Wall Street, and Hedge4.ai(Hedge4.ai)

The New Jersey Bureau of Securities issued a Cease and Desist Order against Horatiu Charlie Caragaceanu and his organizations for promoting TruthGPT Coin, a cryptocurrency scam that falsely claimed AI capabilities and endorsements from figures like Elon Musk. The respondents misrepresented the AI model's ability to predict cryptocurrency prices and manipulated images to show false endorsements, targeting investors with unrealistic profit promises.

LowAI/Automated Decisions
CTEnforcement Action

M&T Bank(M&T)

Connecticut Attorney General William Tong testified in support of legislation to grant his office investigative authority under the Consumer Financial Protection Act to address widespread consumer complaints following the merger of People’s United Bank and M&T Bank, including issues with account access, unauthorized transactions, and payment processing errors.

Low
FTCAdministrative Order

Financial institutions covered by the Safeguards Rule(Financial Institutions)

The FTC extended the compliance deadline for certain provisions of the Safeguards Rule by six months to June 9, 2023, due to challenges like shortage of qualified personnel and supply chain issues exacerbated by the COVID-19 pandemic. The rule requires non-banking financial institutions to implement enhanced data security measures, and the extension aims to facilitate compliance, especially for small entities.

Low
CTCoalitionMultistate

Mortgage Servicers

Connecticut Attorney General William Tong joined a coalition of 22 attorneys general in urging the Consumer Financial Protection Bureau (CFPB) to prohibit mortgage servicers from charging convenience fees. The coalition argues that these fees are exploitative and unfair, as homeowners have no choice in their servicers and fees often exceed the actual cost of processing payments. They request that the CFPB either ban such fees or limit them to actual costs, and require servicers to document their costs.

Low
CTCoalitionMultistate

Buy-Now-Pay-Later Lenders(BNPL Lenders)

Connecticut Attorney General William Tong joined a coalition of 19 attorneys general to submit comments to the CFPB, urging robust consumer protections for buy-now-pay-later (BNPL) lenders. The coalition expressed concerns that BNPL loans may trap consumers in debt through hidden fees, inadequate disclosures, and improper data monetization practices.

LowNotice FailureUnauthorized Data Sharing
FTCInjunction

Turbo Solutions Inc.(Turbo Solutions)

The FTC obtained an injunction against Turbo Solutions Inc. and Alex V. Miller for operating a deceptive credit repair scheme that filed fake identity theft reports without consumers' consent. The scheme charged illegal advance fees and made false promises about removing negative credit items. The court order halts the operation and seeks consumer redress.

LowUnauthorized Data Sharing
FTCSettlement

Ascension Data & Analytics, LLC(Ascension Data & Analytics)

The FTC settled with Ascension Data & Analytics, LLC for violating the Gramm-Leach-Bliley Act's Safeguards Rule by failing to ensure its vendor properly protected consumer data. The company must strengthen its security safeguards and increase oversight of vendors. No monetary penalty was imposed.

LowSecurity Failure
FTCSettlement

Ascension Data & Analytics, LLC(Ascension Data & Analytics)

Ascension Data & Analytics, LLC, a mortgage analytics company, settled FTC allegations that it violated the Gramm-Leach-Bliley Act's Safeguards Rule by failing to ensure its vendor adequately protected consumer data. The vendor stored sensitive mortgage information in plain text on a cloud server, leading to unauthorized access. Ascension must implement a data security program, undergo biennial assessments, and report future breaches.

LowSecurity Failure
CAEnforcement Action

Citibank, N.A.(Citibank)

In 2013, the California Attorney General filed a complaint against Citibank, N.A. alleging that the bank failed to implement adequate security measures and did not properly notify customers about a data breach exposing personal and financial information. The complaint asserts violations of California's data breach notification law.

LowSecurity FailureBreach Notification Delay

Explore Enforcement Data