Court Rules

Privacy Enforcement Tracker

1,447 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,447

Total Actions

16

Jurisdictions

$26.1B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
FTCConsent Decree

Illuminate Education, Inc.(Illuminate Education)

The FTC proposed a consent order against Illuminate Education, Inc. for failing to secure student data, leading to a breach affecting over 10 million students. The company allegedly had security failures and delayed breach notifications. The order requires a data security program, data deletion, and a retention schedule.

LowSecurity FailureBreach Notification DelayStudent Data
FTCConsent Decree

Global Tel*Link Corp.(Global Tel*Link)

The FTC proposed a consent order against Global Tel*Link Corp. for failing to secure sensitive user data, leading to a breach affecting nearly 650,000 consumers, and for delaying notification for about nine months. The order requires the company to implement a comprehensive security program, notify affected users with credit monitoring, and report future breaches promptly.

LowSecurity FailureBreach Notification Delay
FTCConsent DecreeMultistate

Easy Healthcare Corporation(Easy Healthcare)

The FTC charged Easy Healthcare Corporation, operator of the Premom fertility app, with deceiving users by sharing their sensitive health data with third parties for advertising without consent and failing to notify breaches as required by the Health Breach Notification Rule. Under a proposed consent decree, the company will pay a $100,000 civil penalty, be barred from sharing health data for advertising, and must implement privacy and security measures.

MediumUnauthorized Data SharingConsent FailureNotice Failure

$100K

FTCConsent Decree

CafePress

The FTC finalized an order against CafePress for failing to secure consumer data and covering up a data breach. The company must implement comprehensive security measures, and its former owner must pay $500,000 in redress to victims.

MediumSecurity FailureData BreachBreach Notification Delay

$500K

FTCSettlement

CafePress

The FTC settled with CafePress for failing to implement reasonable data security measures, leading to multiple breaches that exposed Social Security numbers and other sensitive data. As part of the settlement, over $370,000 in refunds are being distributed to 20,044 consumers who filed valid claims.

LowSecurity FailureData BreachBreach Notification Delay

$370K

Explore Enforcement Data