Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
MNCoalitionMultistate

Internal Revenue Service

Minnesota Attorney General Keith Ellison co-led a multistate coalition opposing a proposed IRS rule that could deny or revoke tax-exempt status for schools with racial nondiscrimination policies. The coalition argued the proposal would undermine civil-rights and equal-protection principles, burden donors and states, and violate the Administrative Procedure Act; the press release describes opposition, not an enforcement penalty or remedy.

Low
VAEnforcement ActionMultistate

Trump Administration

Virginia’s Attorney General joined a multistate lawsuit challenging a federal Medicaid rule that made it harder for medically vulnerable people to qualify for exemptions from work requirements. The court found the definition of medical frailty unlawful, vacated that language, and issued a permanent injunction; the release does not state the court decision’s date, so the release date is used as a proxy.

Low
CTCoalitionMultistate

Donald Trump and his co-defendants

Connecticut Attorney General William Tong joined attorneys general from 17 states in an amicus brief urging the New York Court of Appeals to preserve state authority to pursue fraud cases. The underlying civil case alleges that Donald Trump and his co-defendants inflated asset values to obtain better loan and insurance terms; this press release announces advocacy, not a new enforcement order or penalty.

Low
MNCoalitionMultistate

Donald Trump

Minnesota Attorney General Keith Ellison joined a coalition of 17 attorneys general in filing an amicus brief supporting New York’s authority to pursue a civil fraud case against Donald Trump and his business associates. The brief was filed in an appeal; the press release does not report a ruling, penalty, or remedy, and does not describe a privacy enforcement action.

Low
VASettlementMultistate

General Motors

General Motors agreed to a $220 million settlement with a coalition of 36 attorneys general over allegations that it sold consumers’ driver behavior and location data to third parties, including data brokers that resold it to insurers. The settlement reportedly requires consumer consent before collecting or disclosing driving and location data, and Virginia is to receive about $6.5 million.

CriticalUnauthorized Data SharingConsent FailureGeolocation Data

$220.0M

MNSettlementMultistate

General Motors

A bipartisan coalition of 36 attorneys general settled allegations that General Motors collected and sold drivers’ driving-behavior and location data to data brokers, whose customers included insurance companies. GM will pay $220 million nationally, with Minnesota receiving $7,095,664, and must obtain affirmative express consent before collecting or disclosing driving and location data.

HighUnauthorized Data SharingConsent FailureNotice Failure

$7.1M

COEnforcement ActionMultistate

Toast, Inc.

Colorado, the FTC, and a bipartisan group of state attorneys general sued Toast, alleging misleading claims about its subscription services and financial products, undisclosed fees, and obstacles to cancelling subscriptions. The coalition is asking the court for an injunction, monetary relief, civil penalties, and other relief; the press release does not report an imposed penalty.

LowNotice FailureOpt-Out FailureDark Patterns
COSettlementMultistate

General Motors

General Motors agreed to a nationwide $220 million settlement over allegations that it sold drivers’ identifiable driving behavior and location data to data brokers, which then sold it to insurers. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.

CriticalUnauthorized Data SharingConsent FailureNotice Failure

$220.0M

CTSettlementMultistate

General Motors LLC

Connecticut and a coalition of 36 attorneys general reached a $220 million settlement with General Motors over the collection and sale of consumers’ driving behavior and location data to data brokers and insurers without adequate disclosure or consent. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy program assessments and dealership oversight and training.

CriticalUnauthorized Data SharingConsent FailureNotice Failure

$220.0M

FTCEnforcement ActionMultistate

Toast Inc.

The FTC and state and local co-plaintiffs filed a lawsuit alleging Toast imposed hidden and unauthorized fees, enrolled restaurants in add-ons without consent, obstructed subscription cancellations, and misrepresented customer support availability. The complaint is pending in federal court; the press release announces no monetary penalty or imposed remedy.

LowConsent FailureDark Patterns
NYEnforcement ActionMultistate

Trump administration

New York Attorney General Letitia James and a coalition of 24 other states and the District of Columbia challenged a federal rule imposing additional proof requirements on some medically frail Medicaid recipients. The U.S. District Court for the District of Massachusetts granted summary judgment, declaring a central provision of the rule illegal and blocking it.

Low
FTCRegulatory Report

Multiple impersonation-scam operators

The FTC summarized enforcement actions and other efforts targeting businesses and individuals allegedly impersonating government agencies or legitimate businesses. The release reports more than $80 million in consumer redress across prior actions and takedowns of 19 websites, but it does not announce a new settlement or impose a specific penalty.

Low
NJSettlementMultistate

General Motors, Inc.

A 36-attorney-general coalition resolved allegations that General Motors collected and sold identifiable driver behavior and location data to data brokers, which supplied it to insurers for use in assessing drivers and potentially raising premiums. The $220 million nationwide settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.

CriticalUnauthorized Data SharingNotice FailureConsent Failure

$220.0M

FTCWarning Letter

25 companies that market or generate sales leads for healthcare plans (recipients not named)

FTC staff announced warning letters to 25 healthcare plan marketers and lead generators about deceptive or unfair claims concerning plan benefits, coverage, costs, and enrollment incentives. The letters do not allege wrongdoing by their recipients or impose penalties; they encourage companies to review their advertisements for compliance.

Low
NYSettlementMultistate

General Motors LLC

New York Attorney General Letitia James and a bipartisan coalition secured a $220 million settlement from General Motors LLC for selling drivers’ personal driving and location data to data brokers without adequate disclosure or consent. GM must limit the driving data it collects and implement privacy assessments and dealership oversight and training.

CriticalUnauthorized Data SharingNotice FailureConsent Failure

$220.0M

FTCInvestigation

Delta, United, JetBlue, Lyft, Uber, DoorDash, Instacart, Target, and Walmart

The FTC issued information orders to nine companies to examine whether they use personal data and other factors to set individualized consumer prices or gig-worker compensation. This is a study and information-gathering inquiry, not a finding that the companies violated the law; recipients must respond within 45 days of receiving the orders.

LowSurveillance Pricing
NYSettlement

Frank W. Cawood & Associates, Inc.

New York Attorney General Letitia James secured a settlement with Frank W. Cawood & Associates, Inc. over mailers that advertised books as free or no-risk while obscuring payment and return terms. The company must end the program in New York, pay $23,500, and provide refunds to eligible consumers.

LowDark Patterns

$24K

NYGuidance

New York Office of the Attorney General

New York Attorney General Letitia James issued a consumer alert about fire risks from e-bike and other lithium-ion batteries and shared safety and disposal recommendations. The release describes no privacy enforcement action, monetary penalty, or remedy.

Low
COCoalitionMultistate

U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN)

Colorado joined a 21-attorney-general coalition suing to challenge a FinCEN rule that exempts nearly all businesses from Corporate Transparency Act ownership-reporting requirements, as well as plans to delete existing ownership records. The coalition alleges violations of the Corporate Transparency Act and Administrative Procedure Act and asks the court to invalidate the rule and require FinCEN to continue collecting and maintaining the records.

LowRecord Retention
NYCoalitionMultistate

U.S. Department of the Treasury

New York Attorney General Letitia James and 20 other attorneys general sued to block a Treasury Department rule that exempts domestic companies and U.S. owners of foreign companies from Corporate Transparency Act ownership disclosures. The coalition alleges the rule is unlawful and unconstitutional, including because Treasury plans to delete information collected from companies now exempted, and seeks a court order blocking its implementation.

LowRecord Retention
MNCoalitionMultistate

Financial Crimes Enforcement Network (FinCEN)

Minnesota Attorney General Keith Ellison joined a multistate coalition suing to block a FinCEN rule that exempted nearly all businesses from Corporate Transparency Act reporting and announced that it would delete existing ownership information. The coalition alleges violations of federal law and asks the court to invalidate the rule and require FinCEN to continue collecting and maintaining the database; no penalty or court order is reported.

LowRecord Retention
VACoalitionMultistate

Financial Crimes Enforcement Network (FinCEN)

Virginia joined a multistate lawsuit challenging a FinCEN rule that exempts nearly all businesses from beneficial-ownership reporting and the agency’s plan to delete ownership information already collected. The states allege violations of the Corporate Transparency Act and Administrative Procedure Act and seek to have the rule set aside and the ownership database maintained; no court outcome or monetary penalty is reported.

LowRecord Retention
NJEnforcement ActionMultistate

Dollar General Corporation

New Jersey, the FTC, and a coalition of 19 other states sued Dollar General, alleging that customers were repeatedly charged more at checkout than prices displayed on shelves, tags, and advertisements. The complaint alleges deceptive pricing practices and inadequate safeguards despite consumer complaints; the release does not describe a settlement, penalty, or other remedy imposed.

Low
CTCoalitionMultistate

Meta Platforms, Inc.

Connecticut Attorney General William Tong and 13 other attorneys general sent Meta a letter after the No Kings Coalition’s Instagram account was mistakenly suspended during a nationwide election-related day of action. The letter asks Meta to explain the suspension, its use of human review, steps to prevent similar errors, and how users can seek redress; it does not announce a fine or impose a remedy.

LowAI/Automated Decisions
CTEnforcement ActionMultistate

Dollar General Corporation

Connecticut joined the FTC and attorneys general from 19 other states in suing Dollar General, alleging that it repeatedly charged customers more at checkout than prices displayed on shelves, tags, and advertisements. The complaint alleges years of overcharging and insufficient safeguards, but the release does not report a settlement, court order, or monetary penalty.

Low
MNCoalitionMultistate

U.S. Department of Homeland Security

Minnesota Attorney General Keith Ellison led a coalition of 17 attorneys general in an amicus brief supporting a lawsuit challenging the termination of Temporary Protected Status for Somali nationals. The coalition asked the appeals court to reverse a lower court decision and block the revocation; this press release describes no privacy-related allegation, penalty, or remedy imposed.

Low
FTCEnforcement ActionMultistate

Dollar General Corporation

The FTC and 20 states sued Dollar General, alleging that it repeatedly charged customers more at checkout than advertised prices and failed to correct the problem despite consumer complaints and corporate knowledge. The complaint alleges violations of federal and state laws; the case is pending, and the press release does not report a penalty or final remedy.

Low
TXEnforcement Action

Open AI Global, LLC

Texas Attorney General Ken Paxton sued Open AI Global, LLC and affiliated entities, alleging that ChatGPT was marketed as safe and reliable without disclosing risks of inaccurate or harmful outputs. The suit also alleges harms to minors and collection of their data without parental oversight; the release states no monetary penalty or specific remedy imposed.

LowNotice FailureChildren's Data
NYSettlement

BCMB1 Trust; First Age, LLC; NS194, LLC; Second Start, LLC; Southern MBA Trust, and their affiliates

New York Attorney General Letitia James reached an agreement with debt buyers that allegedly filed foreclosure lawsuits seeking payment on expired mortgage debt. The companies must pay $240,000 in penalties and more than $242,000 in restitution, and stop seeking expired payments in ongoing and future cases.

Medium

$240K

CTSettlement

SunRun, Inc.

Connecticut Attorney General William Tong announced settlements with SunRun, Inc., Elevate Solar Solutions, and two salespeople over allegations of deceptive solar sales, including impersonating consumers and locking homeowners into long-term contracts without consent. SunRun must pay $300,000 and provide consumer relief; Elevate and the salespeople face a stated $200,000 penalty, with $100,000 suspended subject to ongoing compliance.

MediumConsent Failure

$500K

Explore Enforcement Data