Court Rules

Privacy Enforcement Tracker

1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,634

Total Actions

16

Jurisdictions

$49.9B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
FTCEnforcement Action

MyLife.com, Inc.(MyLife.com)

The FTC filed a complaint against MyLife.com, Inc. and its CEO for deceiving consumers with 'teaser background reports' that falsely claimed to include criminal and arrest records, and for violating the Fair Credit Reporting Act by failing to ensure accuracy and permissible purpose. The company also engaged in misleading billing practices under the Restore Online Shoppers’ Confidence Act and Telemarketing Sales Rule.

LowUnauthorized Data Sharing
FTCSettlement

Ortho-Clinical Diagnostics, Inc.(Ortho-Clinical Diagnostics)

The FTC settled with Ortho-Clinical Diagnostics, Inc. for misleading consumers about its participation in the EU-U.S. Privacy Shield framework. The company allowed its certification to lapse in 2018 but continued to claim participation. The settlement prohibits such misrepresentations and requires compliance with Privacy Shield obligations for data collected or deletion of such data.

LowNotice Failure
FTCSettlement

Miniclip, S.A.(Miniclip)

The FTC finalized a settlement with Miniclip, S.A. for falsely claiming it was a member of the CARU COPPA safe harbor program. Miniclip is prohibited from misrepresenting its participation in privacy programs and subject to compliance and recordkeeping requirements.

LowChildren's Data
FTCSettlement

Kohl's Department Stores, Inc.(Kohl's)

The FTC settled with Kohl's Department Stores for violating the Fair Credit Reporting Act by failing to provide identity theft victims with access to their business transaction records within 30 days. Kohl's agreed to pay a $220,000 civil penalty and must implement measures to comply with FCRA requirements, including providing records promptly and posting a notice on its website.

MediumNotice Failure

$220K

FTCSettlement

HyperBeard, Inc.(HyperBeard)

HyperBeard, Inc., a developer of children's apps, agreed to pay $150,000 and delete personal information it illegally collected from children under 13 to settle FTC allegations that it violated COPPA by allowing third-party ad networks to collect persistent identifiers without parental consent. The settlement requires HyperBeard to obtain verifiable parental consent for future data collection and prohibits using the illegally collected data.

MediumChildren's Data

$150K

FTCConsent Decree

NTT Global Data Centers, Inc.(NTT Global Data Centers)

NTT Global Data Centers settled FTC allegations that it misled consumers about its participation in the EU-U.S. Privacy Shield framework and failed to comply with its requirements. The settlement requires the company to hire a third-party assessor if it re-certifies, prohibits misrepresentations about privacy programs, and mandates continued application of Privacy Shield protections or deletion of data collected while participating.

LowNotice Failure
FTCConsent Decree

Facebook, Inc.(Meta)

The FTC charged Facebook with deceiving consumers about its privacy practices and violating a 2012 consent order. In July 2019, Facebook agreed to pay a $5 billion civil penalty and accept comprehensive new privacy restrictions.

CriticalNotice FailureConsent Failure

$5.0B

Explore Enforcement Data