Court Rules

Privacy Enforcement Tracker

1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,634

Total Actions

16

Jurisdictions

$49.9B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NYSettlement

DARCARS of Railroad Avenue, Inc. (DARCARS Lexus) and MT Kisco Automotive, LLC (DARCARS BMW)

New York Attorney General Letitia James secured a settlement with two Mt. Kisco car dealerships, DARCARS Lexus and DARCARS BMW, that deceptively charged a two percent 'sales commission' fee that was optional, provided no consumer benefit, and was never paid to the salesperson, and that misleadingly bundled a low-value aftermarket product ('DARCARS Assurance') into sales and lease agreements as if it were mandatory. The dealerships will pay more than $1.17 million in consumer refunds (with potentially millions more through a claims process) plus $700,000 in penalties. They must clearly disclose all future fees and add-ons, are banned from selling DARCARS Assurance or similar junk bundles at any New York dealership, and must conduct annual fair-business-practices training for all employees.

MediumDark PatternsNotice Failure

$700K

NYSettlement

425 Marcy, LLC

New York Attorney General Letitia James secured a settlement with 425 Marcy, LLC and its principal Ezra Unger over the unlawful pre-sale of condominium units at 427 Marcy Avenue in Williamsburg before the required Martin Act offering plan was accepted for filing, and the misuse of $6.715 million in buyer down payments that were never placed in escrow. Unger agreed to repay residential buyers their down payments with interest or provide purchase credits, pay up to $824,000 in penalties, and is barred from selling securities in New York for six years. Note: this is a real estate offering-plan/escrow enforcement action rather than a data privacy matter; 'notice_failure' is the closest available taxonomy mapping (selling without the required offering plan disclosures).

MediumNotice Failure

$824K

NYSettlement

Thirty Madison, Inc.

New York Attorney General Letitia James secured $400,000 from Thirty Madison, Inc., an online medication provider, for misleading consumers about auto-renewing subscriptions and making cancellation difficult. The company failed to clearly disclose subscription terms and non-refundable fees, and required multiple steps to cancel. The settlement requires payment, refunds to eligible subscribers, and changes to subscription practices.

MediumNotice FailureConsent FailureDark Patterns

$400K

NYEnforcement ActionMultistate

Meta Platforms, Inc.

New York Attorney General Letitia James issued a statement marking the first day of trial in a multistate lawsuit against Meta, alleging the company knowingly designed addictive features on Facebook and Instagram that harm children's mental health. The coalition alleges Meta illegally collected personal information from children under 13 without parental consent, violating COPPA, and seeks monetary penalties, restitution, and an injunction against deceptive practices.

LowChildren's DataConsent FailureDark Patterns
NYEnforcement Action

Healing for Heroes – A Disabled Veteran’s Retreat and Wooded Oasis, Inc.

New York Attorney General Letitia James sued Healing for Heroes, a purported veterans' charity, for defrauding donors. The organization claimed to provide free outdoor retreats for disabled veterans but instead used donations for personal expenses and property improvements. The AG seeks to dissolve the organization, bar the leaders from soliciting funds, and impose civil penalties.

LowNotice FailureRecord Retention
NYSettlement

1-800-Flowers.com, Inc.

New York Attorney General Letitia James secured $375,000 from 1-800-Flowers.com, Inc. for misleading consumers and enrolling them in automatically-renewing paid subscriptions without clear disclosure or consent. The settlement requires 1-800-Flowers to pay penalties, change its subscription practices, and provide refunds to eligible subscribers.

MediumNotice FailureConsent FailureOpt-Out Failure

$375K

NYEnforcement Action

3M Company

New York Attorney General Letitia James sued 3M, DuPont, and other chemical companies for knowingly causing decades of PFAS pollution through consumer products. The lawsuit alleges the companies hid toxicity risks, failed to warn the public, and seeks cleanup funding, damages, and injunctive relief.

LowNotice FailureConsent FailureHealth Data
NYSettlementMultistate

Block, Inc.

New York Attorney General Letitia James and a bipartisan coalition of 45 other attorneys general secured $45 million from Block, Inc., the company behind Cash App, for misleading users about the platform's security and failing to protect them from fraud. The settlement requires Block to implement changes including maintaining live customer support, stopping misleading marketing, and fulfilling legal obligations to investigate fraud claims and reimburse users for unauthorized transactions.

CriticalSecurity FailureNotice FailureConsent Failure

$45.0M

NYInvestigation

Instacart

New York Attorney General Letitia James sent a letter to Instacart demanding information about its use of algorithmic pricing, after a study found users were charged up to 23% more for identical products. The AG warned that Instacart’s pricing disclosures are non-compliant with New York’s Algorithmic Pricing Disclosure Act, which requires prominent notices near product prices when personal data is used to set prices. Instacart must provide details on its pricing experiments, automated tools, and compliance efforts with the state’s disclosure requirements.

LowSurveillance PricingNotice Failure
NYEnforcement ActionMultistate

23andMe, Inc.(23andMe)

New York Attorney General Letitia James, joined by 27 other state attorneys general and the District of Columbia, filed a lawsuit against 23andMe to block the company’s planned sale of 15 million customers’ genetic and health data without their consent or knowledge. The coalition argues 23andMe must comply with state laws requiring express informed consent for the sale or transfer of sensitive genetic data. The lawsuit seeks to prevent misuse, exposure in future breaches, and unauthorized use of customers’ private genetic information.

LowConsent FailureHealth DataUnauthorized Data Sharing
NYEnforcement Action

National General Holdings Corp and Allstate Insurance Company(National General)

New York Attorney General Letitia James filed a lawsuit against National General Holdings Corp and Allstate Insurance Company for failing to protect personal information and notify consumers of data breaches. The breaches exposed driver's license numbers of over 165,000 New Yorkers due to poor cybersecurity. The AG is seeking monetary penalties and an injunction.

LowSecurity FailureNotice Failure
NYSettlement

Saturn Technologies(Saturn)

New York Attorney General Letitia James settled with Saturn Technologies, developer of the Saturn social networking app for high school students, over failures to protect young users’ privacy. The Office of the Attorney General found the company disabled required email verification for thousands of schools, used inadequate age and identity checks, retained user contact data after access was revoked, and failed to maintain proper privacy records. Saturn will pay $650,000 in penalties and implement enhanced privacy protections for minor users, including mandatory bi-annual privacy setting reviews and data deletion requirements.

MediumChildren's DataConsent FailureNotice Failure

$650K

Explore Enforcement Data