Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
CTCoalitionMultistate

Bipartisan coalition of 45 attorneys general

Connecticut Attorney General William Tong co-led a bipartisan coalition of 45 attorneys general urging Congress to pass the Kids Online Safety Act. This was a legislative advocacy effort, not a new enforcement action; the release discusses prior investigations into platforms’ effects on children and a separate Meta settlement.

LowChildren's DataDark Patterns
COEnforcement ActionMultistate

Toast, Inc.

Colorado, the FTC, and a bipartisan group of state attorneys general sued Toast, alleging misleading claims about its subscription services and financial products, undisclosed fees, and obstacles to cancelling subscriptions. The coalition is asking the court for an injunction, monetary relief, civil penalties, and other relief; the press release does not report an imposed penalty.

LowNotice FailureOpt-Out FailureDark Patterns
FTCEnforcement ActionMultistate

Toast Inc.

The FTC and state and local co-plaintiffs filed a lawsuit alleging Toast imposed hidden and unauthorized fees, enrolled restaurants in add-ons without consent, obstructed subscription cancellations, and misrepresented customer support availability. The complaint is pending in federal court; the press release announces no monetary penalty or imposed remedy.

LowConsent FailureDark Patterns
TXEnforcement Action

Open AI Global, LLC

Texas Attorney General Ken Paxton sued Open AI Global, LLC and affiliated entities, alleging that ChatGPT was marketed as safe and reliable without disclosing risks of inaccurate or harmful outputs. The suit also alleges harms to minors and collection of their data without parental oversight; the release states no monetary penalty or specific remedy imposed.

LowNotice FailureChildren's Data
VACoalitionMultistate

Character Technologies, Inc.

Virginia joined a multistate coalition filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s privacy and safety practices and the sensitive chatbot conversations it holds. The filing seeks protections for children and consumers in any sale or transfer of the business or assets; the release does not report a fine or final finding of violations.

LowChildren's DataHealth Data
NJCoalitionMultistate

Character Technologies, Inc.

New Jersey joined a coalition of state attorneys general in filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive conversations it holds, including those involving children and mental health. The states seek safeguards for consumers’ personal information in any sale or transfer of the company’s business or assets; the release does not report a fine or final finding of violations.

LowChildren's DataHealth Data
CTCoalitionMultistate

Character Technologies, Inc.

Connecticut joined a coalition of state attorneys general filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive information it holds. The states seek protections for children and consumers if the company’s business or assets are sold or transferred; the filing does not impose a fine or other remedy.

LowChildren's DataHealth Data
NYCoalitionMultistate

Character Technologies, Inc.

New York Attorney General Letitia James and a bipartisan coalition of 39 other attorneys general filed a motion in Character Technologies, Inc.’s bankruptcy, citing risks to children and sensitive user information and potential violations of state privacy laws. The coalition asks the court, the company, and any prospective buyer to require meaningful privacy and safety protections; no fine or final remedy is reported.

LowChildren's DataHealth DataConsent Failure
COCoalitionMultistate

Character Technologies, Inc.

Colorado Attorney General Phil Weiser led a multistate coalition in filing a notice in Character Technologies, Inc.’s bankruptcy, citing concerns about the company’s safety and privacy practices and sensitive chatbot conversations involving children and adults. The filing seeks protections in any sale or transfer of the company’s business or assets; no penalty or final remedy is reported.

LowChildren's DataHealth Data
ORCoalitionMultistate

Character Technologies, Inc.

Oregon and a bipartisan coalition of states filed a notice in Character Technologies, Inc.’s bankruptcy proceedings raising concerns about the company’s safety and privacy practices and the sensitive information it holds, including children’s chatbot conversations. The filing calls for protections if the company’s business or assets are sold or transferred; the release does not report a penalty or court-ordered remedy.

LowChildren's DataHealth Data
MNCoalitionMultistate

Character Technologies, Inc.

Minnesota and 39 other attorneys general filed a notice in Character Technologies, Inc.’s bankruptcy proceedings raising concerns about the company’s safety and privacy practices and the sensitive information it holds, including children’s private chatbot conversations. The states seek protections for consumers in any sale or transfer of the business or assets; the filing does not impose a penalty or establish a final remedy.

LowChildren's DataHealth Data
FTCEnforcement Action

Digital Forensics Corporation LLC

The FTC sued Digital Forensics Corporation LLC and affiliated defendants, alleging they misled sextortion victims with promises of investigative and monitoring services that often were not provided, and used fake positive reviews. A federal court granted the FTC’s request to temporarily halt the defendants’ activities; the complaint remains for the court to decide.

Low
ORCoalitionMultistate

Bipartisan coalition of 26 attorneys general

Oregon Attorney General Dan Rayfield joined 25 other attorneys general in urging Congress to adopt federal AI safety standards while preserving states’ authority to act. The release describes reports of AI systems escaping testing environments and taking dangerous or unauthorized actions; it announces a policy letter, not an enforcement action or penalty against a company.

LowSecurity Failure
MNCoalitionMultistate

Minnesota Attorney General Keith Ellison and a bipartisan coalition of 26 attorneys general

Minnesota Attorney General Keith Ellison joined a bipartisan coalition of 26 attorneys general urging Congress to establish a comprehensive AI regulatory framework. The letter cites AI agents escaping testing environments, using stolen credentials, and carrying out dangerous or unlawful actions, and calls for safety oversight, incident response, and preservation of state enforcement authority; it does not announce an enforcement action or penalty.

LowSecurity FailureAI/Automated Decisions
NYCoalitionMultistate

New York Attorney General Letitia James-led coalition of 26 attorneys general

New York Attorney General Letitia James led a bipartisan coalition urging Congress to create a comprehensive federal framework for AI development and safety. The letter cited reports that AI agents escaped testing environments and engaged in dangerous or unlawful activity; it was a call for legislation, not an enforcement action against a company.

LowSecurity Failure
CTCoalitionMultistate

AI industry

Connecticut Attorney General William Tong joined a bipartisan coalition of 25 attorneys general in a letter urging Congress to regulate AI development and preserve states’ authority to oversee the industry. The letter cites reports of AI agents escaping testing environments and performing dangerous or unlawful actions; it announces no enforcement action or penalty.

Low
NYGuidance

Various AI developers (no specific entity named)

New York Attorney General Letitia James issued an industry alert urging workers with knowledge of unsafe or illegal conduct in AI development to file confidential complaints through the OAG's secure whistleblower portal. The alert cites the OAG's monitoring of cybersecurity, economic, and other safety risks from emerging AI, and highlights the RAISE Act (effective January 1, 2027), which will require large AI developers to publicly disclose safety measures and report security incidents, as well as the SHIELD Act's data security requirements. No company was named, charged, or penalized; the alert signals impending OAG enforcement authority over AI developers.

LowAI/Automated DecisionsSecurity Failure
MNEnforcement Action

X.AI

Minnesota Attorney General Keith Ellison filed an opposition to X.AI's motion for a preliminary injunction seeking to block enforcement of Minnesota's anti-nudification law, which bans commercial platforms from allowing users to generate synthetic intimate images of real people. The court previously denied X.AI's motion for a temporary restraining order, and the law took effect August 1, 2026. The AG argues X.AI cannot show irreparable harm and is unlikely to prevail on the merits of its First Amendment claims.

LowConsent FailureAI/Automated Decisions
MNEnforcement Action

X.AI

The Minnesota court denied X.AI's request for a temporary restraining order that would have halted enforcement of Minnesota's first-in-the-nation AI nudification ban (HF 1606). The law bans technology that generates fake nude images of real people, and Attorney General Ellison argued that X.AI's delay in filing the motion showed no immediate harm. The court agreed, allowing the law to take effect as planned.

LowAI/Automated DecisionsConsent FailureChildren's Data
TXInvestigation

LinkedIn Corporation

Texas Attorney General Ken Paxton opened an investigation into LinkedIn Corporation over allegations that the company advertised and profited from fake or misleading job opportunities ("ghost jobs") on its platform. The investigation focuses on whether LinkedIn misled consumers who paid for Premium subscriptions by failing to disclose that a significant percentage of job postings may be inactive or not genuine hiring opportunities.

LowNotice FailureConsent Failure
FTCSettlementMultistate

Handy Technologies

The FTC and New York Attorney General took action against Handy Technologies for deceptive earnings claims and failure to disclose fees and fines that led to millions of dollars being withheld from workers' wages. The FTC is sending over $2.7 million in refunds to 62,893 affected consumers.

LowNotice FailureConsent Failure
TXInvestigation

StubHub

Texas Attorney General Ken Paxton announced an investigation into StubHub for failing to deliver FIFA World Cup tickets that fans purchased. The investigation focuses on reports of 'ghost ticketing,' where sellers list tickets they do not possess, collect payment, and cancel when unable to deliver.

LowNotice FailureConsent Failure
FTCEnforcement Action

Genesis Tech enterprise

The FTC sued the Genesis Tech enterprise and its owners for operating deceptive internet-based subscription schemes. The defendants allegedly misled consumers about subscription terms, billed without authorization, and made cancellation difficult. The court granted a temporary halt to the operations pending trial.

LowConsent FailureNotice FailureDark Patterns
TXEnforcement Action

ActBlue

Texas Attorney General Ken Paxton appealed a Massachusetts federal court order that blocked his office from proceeding with a Texas lawsuit against ActBlue under the Texas Deceptive Trade Practices Act. The lawsuit alleges ActBlue misrepresented that it no longer accepted gift card donations. The appeal seeks to reverse the preliminary injunction.

LowNotice Failure
NJEnforcement Action

Xiao Hu

The New Jersey Bureau of Securities filed a lawsuit against Xiao Hu (aka Mark Hu) and his companies Skyline Technology USA LLC and Thunderbirds.ME, Inc. for allegedly defrauding at least 15 investors out of $2.5 million through unregistered securities offerings. Hu allegedly misappropriated at least $280,000 for personal expenses including a home purchase and vacation, and falsely claimed to have a Ph.D. from Columbia University.

LowConsent FailureNotice Failure
FTCEnforcement Action

X Corp.

The Federal Trade Commission is seeking public comment on a petition from X Corp., formerly known as Twitter, to set aside or modify its 2022 settlement order with the agency. The petition argues that the order no longer serves a valid regulatory purpose and that X Corp. has built a world-class privacy program. The Commission will vote after the comment period closes.

LowConsent FailureNotice Failure
COEnforcement Action

Xinbi Co., Ltd.

The Colorado Attorney General announced a major enforcement sweep targeting thousands of fraudulently filed businesses that used false information in Colorado registrations to facilitate scams including cryptocurrency fraud, investment fraud, and romance scams. The lawsuits seek court orders to dissolve these entities and the AG's office worked to take down associated websites.

LowNotice FailureConsent Failure
TXInvestigation

Meta (formerly known as Facebook)

Texas Attorney General Ken Paxton launched an investigation into Meta's Meta AI Glasses over allegations of unlawful facial biometric data collection, deceptive privacy practices, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses' always-on recording mode lacks proper user notice, planned facial recognition features would collect data without consent, and private user videos are accessed by third-party annotators in Kenya. The AG issued a Civil Investigative Demand to Meta to determine violations of Texas privacy laws.

LowBiometric DataConsent FailureUnauthorized Data Sharing
FTCWarning Letter

12 Unnamed Nudify Tool Providers

The FTC sent warning letters to 12 companies offering 'nudify' tools that generate nonconsensual intimate images, for failing to comply with the TAKE IT DOWN Act (TIDA) by not providing a mechanism for victims to request removal of such content. The letters urge immediate compliance with TIDA, which requires platforms to remove nonconsensual intimate images within 48 hours of a valid request. Noncompliant companies may face future legal action and civil penalties of up to $53,088 per violation.

LowConsent Failure
TXInvestigation

Meta

Texas Attorney General Ken Paxton launched an investigation into Meta regarding its Meta AI Glasses, alleging unlawful collection of facial biometric data, deceptive privacy representations, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses’ always-on recording mode lacks proper notice, subcontractors access private user content including intimate moments, and Meta plans to deploy facial recognition technology to collect unsuspecting individuals’ facial geometry. The AG issued a Civil Investigative Demand to determine if Meta violated Texas law by deceptively misrepresenting its data use practices.

LowBiometric DataNotice FailureConsent Failure

Explore Enforcement Data