Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NYSettlement

Carelon Behavioral Health, Inc.

New York Attorney General Letitia James announced settlements with Carelon after investigations found inaccurate mental health provider directories and improper denials of substance use disorder treatment using unapproved criteria. Carelon must pay $2.35 million in penalties, fees, and costs, provide eligible members with restitution or repayment, and change its provider-directory and coverage-review practices.

High

$2.4M

NYSettlement

T-Mobile USA, Inc.

New York’s investigation found that T-Mobile’s affordable broadband offerings did not meet the New York Affordable Broadband Act’s requirements, including because data caps sharply reduced customer speeds and plan information was hidden from search engines. Under an agreement, T-Mobile will remove the caps, offer plans in all areas where it provides home internet service, and make plan information easier to find.

Low
NYGuidance

Office of the New York State Attorney General

The New York Attorney General issued a consumer alert and online guide about scams targeting service members and veterans, including phishing and credit-monitoring scams that may misuse personal information. The release provides steps for protecting information and reporting suspected scams; it does not announce an enforcement action or monetary penalty.

Low
NYGuidance

New York Office of the Attorney General

The New York Attorney General issued guidance explaining Shield Law protections for reproductive and gender-affirming health care information and the steps required before responding to covered information requests. This is guidance, not an enforcement action against a named company; it describes potential penalties for improper disclosure or failure to follow required procedures.

LowHealth DataNotice FailureUnauthorized Data Sharing
NYSettlementMultistate

Perry Johnson & Associates, Inc.; Perry Johnson, Inc.; Perry Johnson & Associates Coding, Inc.; Perry Johnson & Associates Radiology, Inc.; and Medical Transcription and Coding, Inc.

A March 2023 breach exposed personal and protected health information associated with more than 13.3 million people after attackers accessed company systems using an employee’s credentials. The Perry Johnson companies agreed to pay at least $300,000, with an additional $9.7 million in penalties due if they fail to meet the agreement, and to implement security, incident response, and health-data handling reforms.

HighData BreachSecurity FailureHealth Data

$10.0M

NYGuidance

New York local governments and law enforcement agencies

New York Attorney General James and Governor Hochul announced guidance advising county executives and sheriffs that they must end agreements to house or detain people for federal civil immigration violations by November 25, 2026. The Local Cops, Local Crimes Act makes those agreements void and unenforceable after the deadline; no monetary penalty or specific enforcement order is announced.

Low
NYGuidance

New York State Office of the Attorney General

New York Attorney General Letitia James issued a consumer alert warning federal student loan borrowers that consolidating loans after changes under the One Big Beautiful Bill Act may limit repayment options and forgiveness eligibility. This is consumer guidance, not a privacy enforcement action; the release announces no fine or enforcement remedy.

Low
NYSettlement

Bloomberg L.P.

New York Attorney General Letitia James secured a settlement with Bloomberg L.P. after finding that Bloomberg News failed to clearly disclose subscription price increases and automatic renewals, provide required acknowledgments and renewal notices, and make cancellation sufficiently easy. Bloomberg must pay $500,000 in penalties, provide refunds to eligible subscribers, and improve its subscription disclosures and practices.

MediumNotice FailureConsent FailureDark Patterns

$500K

NYEnforcement ActionMultistate

Trump administration

New York Attorney General Letitia James and a coalition of 24 other states and the District of Columbia challenged a federal rule imposing additional proof requirements on some medically frail Medicaid recipients. The U.S. District Court for the District of Massachusetts granted summary judgment, declaring a central provision of the rule illegal and blocking it.

Low
NYSettlementMultistate

General Motors LLC

New York Attorney General Letitia James and a bipartisan coalition secured a $220 million settlement from General Motors LLC for selling drivers’ personal driving and location data to data brokers without adequate disclosure or consent. GM must limit the driving data it collects and implement privacy assessments and dealership oversight and training.

CriticalUnauthorized Data SharingNotice FailureConsent Failure

$220.0M

NYSettlement

Frank W. Cawood & Associates, Inc.

New York Attorney General Letitia James secured a settlement with Frank W. Cawood & Associates, Inc. over mailers that advertised books as free or no-risk while obscuring payment and return terms. The company must end the program in New York, pay $23,500, and provide refunds to eligible consumers.

LowDark Patterns

$24K

NYGuidance

New York Office of the Attorney General

New York Attorney General Letitia James issued a consumer alert about fire risks from e-bike and other lithium-ion batteries and shared safety and disposal recommendations. The release describes no privacy enforcement action, monetary penalty, or remedy.

Low
NYCoalitionMultistate

U.S. Department of the Treasury

New York Attorney General Letitia James and 20 other attorneys general sued to block a Treasury Department rule that exempts domestic companies and U.S. owners of foreign companies from Corporate Transparency Act ownership disclosures. The coalition alleges the rule is unlawful and unconstitutional, including because Treasury plans to delete information collected from companies now exempted, and seeks a court order blocking its implementation.

LowRecord Retention
NYSettlement

BCMB1 Trust; First Age, LLC; NS194, LLC; Second Start, LLC; Southern MBA Trust, and their affiliates

New York Attorney General Letitia James reached an agreement with debt buyers that allegedly filed foreclosure lawsuits seeking payment on expired mortgage debt. The companies must pay $240,000 in penalties and more than $242,000 in restitution, and stop seeking expired payments in ongoing and future cases.

Medium

$240K

NYSettlement

BCMB1 Trust, First Age LLC, NS194 LLC, Second Start LLC, and Southern MBA Trust

The New York Attorney General investigated a group of debt buyers for filing foreclosure actions seeking payment of long-expired mortgage debts. The companies agreed to pay $240,000 in penalties and more than $242,000 in consumer restitution, stop seeking payment of time-barred debts, and amend claims in pending foreclosure cases.

Medium

$240K

NYSettlement

NovaTechFx and AWS Mining Pty Ltd.

The New York Attorney General secured disgorgement settlements totaling $5,975,861 from four promoters of NovaTech and AWS Mining over fraudulent investment claims and an illegal pyramid scheme. The promoters were permanently banned from the securities, commodities, and cryptocurrency industries; the Attorney General separately asked the court to order NovaTech’s founders to pay $1.3 billion, which was not yet an order.

High

$6.0M

NYSettlement

T-Mobile USA, Inc.

New York Attorney General Letitia James secured a settlement after T-Mobile raised prices on plans it had advertised with a promise that prices would never change. T-Mobile must offer affected customers refunds and other benefits, honor price guarantees through at least 2029 for customers who remain, clearly disclose limitations on future guarantees, and pay New York $98,000.

Low

$98K

NYSettlementMultistate

Boston Children’s Health Physicians, LLP and XTIUM

New York and Connecticut reached a settlement with Boston Children’s Health Physicians and its IT security provider, XTIUM, after a 2024 breach exposed private information of approximately 825,000 New York residents and 62,871 Connecticut residents. The companies will pay $2.64 million and implement enhanced cybersecurity measures; additional penalties are conditional on violating the settlement.

HighData BreachSecurity FailureEmployee Data

$2.6M

NYSettlement

DolGen New York, LLC and Dollar General Corporation

New York Attorney General Letitia James secured a settlement after an investigation found Dollar General stores routinely charged customers more than advertised or posted prices and issued confusing receipts. Dollar General must donate $1.875 million in food and personal items to Foodlink and implement pricing, receipt, training, and audit reforms.

High

$1.9M

NYCoalitionMultistate

U.S. Department of Justice

New York Attorney General Letitia James joined 16 other attorneys general in urging Congress to pass proposed legislation addressing the federal government’s release of Jeffrey Epstein-related records. The press release says DOJ has not fully disclosed the records required by the original law and that personal information of at least 43 victims was exposed in released files; this is a legislative advocacy announcement, not an enforcement action imposing a penalty or remedy.

LowData Breach
NYGuidance

New York State Office of the Attorney General

New York Attorney General Letitia James released an updated guide warning voters that AI-generated election content and chatbots may provide misleading information. This is public guidance, not an enforcement action, and the release describes no penalty or privacy violation.

Low
NYCoalitionMultistate

Character Technologies, Inc.

New York Attorney General Letitia James and a bipartisan coalition of 39 other attorneys general filed a motion in Character Technologies, Inc.’s bankruptcy, citing risks to children and sensitive user information and potential violations of state privacy laws. The coalition asks the court, the company, and any prospective buyer to require meaningful privacy and safety protections; no fine or final remedy is reported.

LowChildren's DataHealth DataConsent Failure
NYEnforcement ActionMultistate

Martin Shkreli

New York Attorney General Letitia James, the FTC, and six other state attorneys general asked a federal court to hold Martin Shkreli in contempt for allegedly trading pharmaceutical stocks and discussing pharmaceutical companies in violation of his lifetime industry ban. The requested sanctions include divestiture, an accounting of his trading, forfeiture of trading profits, and possible further fines or incarceration; the release describes a request to the court, not a new ruling imposing those measures.

Low
NYSettlement

Alex Mashinsky

New York Attorney General Letitia James announced a settlement with former Celsius CEO Alex Mashinsky over allegations that he misled investors about Celsius’s safety, users, and investment strategies, and failed to register as required under New York law. The settlement permanently bars Mashinsky from the securities, commodities, and cryptocurrency industries and provides for up to $35 million in payments to New York under specified conditions.

Critical

$35.0M

NYCoalitionMultistate

U.S. Department of Labor

New York Attorney General Letitia James and a multistate coalition sued the U.S. Department of Labor, alleging it unlawfully canceled grants for state unemployment insurance system upgrades after approving the states’ plans. The coalition seeks restoration of the remaining funding and damages; the release does not report a court ruling or penalty.

Low
NYSettlementMultistate

Ascend Laboratories and Mayne Pharma

New York and a coalition of 47 other attorneys general secured settlements with Ascend Laboratories and Mayne Pharma over an alleged scheme to inflate generic drug prices and reduce competition. Mayne agreed to pay $650,000 and Ascend $400,000, with settlement funds distributed to impacted consumers and the companies agreeing to internal antitrust reforms.

High

$1.1M

NYCoalitionMultistate

U.S. Department of Health and Human Services (HHS)

New York Attorney General Letitia James joined a 15-state coalition in suing HHS Secretary Robert F. Kennedy, Jr., challenging changes that removed seven vaccines from the CDC’s list of vaccinations recommended for every child. The states allege the changes and ACIP appointments violated the Administrative Procedure Act and ask the court to invalidate them; the release reports no penalty or court-ordered remedy.

Low
NYCoalitionMultistate

National Highway Traffic Safety Administration (NHTSA)

New York Attorney General Letitia James joined a coalition lawsuit challenging NHTSA’s rollback of federal fuel economy standards. The coalition alleges that the final rule violates federal law and asks the court to strike it down; the press release describes no privacy violations or monetary penalty.

Low
NYSettlementMultistate

Sandoz Inc. and Fougera Pharmaceuticals Inc.

New York Attorney General Letitia James and a coalition of 47 other attorneys general secured a $400 million settlement with Sandoz Inc. and Fougera Pharmaceuticals Inc. over an alleged scheme to coordinate generic drug prices and reduce competition. The settlement provides for consumer compensation and requires Sandoz to implement antitrust compliance reforms, including annual staff training and a Chief Compliance Officer.

Critical

$400.0M

NYCoalitionMultistate

New York Attorney General's Office

New York Attorney General Letitia James joined eight other attorneys general in issuing a statement criticizing a DOJ judicial misconduct complaint against nearly all federal district court judges in Minnesota. The release concerns judicial independence, not a privacy enforcement action; it announces no penalty or privacy-related remedy.

Low

Explore Enforcement Data