Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NYGuidance

New York Office of the Attorney General

The New York Attorney General issued guidance explaining Shield Law protections for reproductive and gender-affirming health care information and the steps required before responding to covered information requests. This is guidance, not an enforcement action against a named company; it describes potential penalties for improper disclosure or failure to follow required procedures.

LowHealth DataNotice FailureUnauthorized Data Sharing
NYEnforcement ActionMultistate

Trump administration

New York Attorney General Letitia James and a coalition of 24 other states and the District of Columbia challenged a federal rule imposing additional proof requirements on some medically frail Medicaid recipients. The U.S. District Court for the District of Massachusetts granted summary judgment, declaring a central provision of the rule illegal and blocking it.

Low
NYEnforcement ActionMultistate

Martin Shkreli

New York Attorney General Letitia James, the FTC, and six other state attorneys general asked a federal court to hold Martin Shkreli in contempt for allegedly trading pharmaceutical stocks and discussing pharmaceutical companies in violation of his lifetime industry ban. The requested sanctions include divestiture, an accounting of his trading, forfeiture of trading profits, and possible further fines or incarceration; the release describes a request to the court, not a new ruling imposing those measures.

Low
NYCoalitionMultistate

U.S. Department of Health and Human Services (HHS)

New York Attorney General Letitia James joined a 15-state coalition in suing HHS Secretary Robert F. Kennedy, Jr., challenging changes that removed seven vaccines from the CDC’s list of vaccinations recommended for every child. The states allege the changes and ACIP appointments violated the Administrative Procedure Act and ask the court to invalidate them; the release reports no penalty or court-ordered remedy.

Low
NYEnforcement ActionMultistate

23andMe, Inc.(23andMe)

New York Attorney General Letitia James, joined by 27 other state attorneys general and the District of Columbia, filed a lawsuit against 23andMe to block the company’s planned sale of 15 million customers’ genetic and health data without their consent or knowledge. The coalition argues 23andMe must comply with state laws requiring express informed consent for the sale or transfer of sensitive genetic data. The lawsuit seeks to prevent misuse, exposure in future breaches, and unauthorized use of customers’ private genetic information.

LowConsent FailureHealth DataUnauthorized Data Sharing

Explore Enforcement Data