Court Rules

Privacy Enforcement Tracker

1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,634

Total Actions

16

Jurisdictions

$49.9B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
COSettlementMultistate

23andMe, Inc.

A coalition of 42 state attorneys general settled with the bankruptcy trustee for 23andMe over a 2023 data breach that exposed genetic data of 6.9 million customers. The states will receive $18 million from bankruptcy funds, and 23andMe agreed to enhanced data security requirements and consumer deletion rights as part of the asset sale to TTAM Research Institute.

HighData BreachSecurity FailureBiometric Data

$18.0M

MNSettlementMultistate

23andMe, Inc.

A coalition of 42 state attorneys general reached a settlement with the bankruptcy trustee for 23andMe over a 2023 data breach that compromised the genetic data of 6.9 million customers. The settlement provides $18 million from bankruptcy funds, with Minnesota receiving $514,871, and imposes data security requirements on the successor entity, 23andMe Research Institute.

HighData BreachSecurity FailureBreach Notification Delay

$18.0M

FTCSettlement

RentGrow Inc.

The FTC alleged that RentGrow, a tenant screening company, violated the FCRA by failing to use reasonable procedures to ensure the accuracy of its consumer reports, failing to disclose sources of data, and mishandling consumer disputes. RentGrow agreed to pay a $2.25 million penalty and is prohibited from further violations.

HighNotice FailureData Broker Non-Compliance

$2.3M

CTSettlementMultistate

Block, Inc.

Attorney General Tong announced a $45 million multistate settlement with Block, Inc., the company behind Cash App, for misleading consumers about the safety of the platform, failing to protect users from fraud, and not providing promised fraud protection and resolution services. The settlement requires Block to implement major reforms including real customer support, transparent communications, and security commitments, and reaffirms Block's commitment to distribute between $75 million and $120 million to compensate consumers as part of a separate CFPB settlement.

HighSecurity FailureNotice FailureConsent Failure

$45.0M

COSettlementMultistate

Block, Inc.

Attorney General Phil Weiser announced a $45 million multistate settlement with Block, Inc., the company behind Cash App, for misleading consumers about the safety of the platform and failing to protect users from fraud. The settlement requires Block to implement antifraud measures, provide customer support, and stop deceptive marketing practices.

HighSecurity FailureNotice FailureConsent Failure

$45.0M

MNSettlementMultistate

Block, Inc.

Attorney General Keith Ellison announced a $45 million multistate settlement with Block, Inc., the company behind Cash App. The settlement resolves allegations that Block misled consumers about the safety of Cash App, failed to protect users from fraud, and did not provide promised fraud protection and resolution. Block agreed to implement responsible practices including maintaining customer support, offering live support, stopping misleading claims, and fulfilling legal obligations to investigate fraud and reimburse users.

HighSecurity FailureNotice FailureConsent Failure

$45.0M

TXSettlement

Walmart, Inc.

Texas Attorney General Ken Paxton secured a settlement with Walmart over deceptive practices in its Spark Driver program. Walmart misrepresented driver pay, including failing to pass on customer tips and altering base pay after drivers accepted offers. The $13 million settlement provides direct payments to affected Texas drivers and requires Walmart to implement honest compensation practices.

HighConsent FailureNotice Failure

$13.0M

FTCSettlement

Publishing.com LLC

The FTC finalized an order against Publishing.com LLC and its principals for misleading consumers about potential earnings from self-publishing products. The company will pay $1.5 million and must substantiate future earnings claims, and is prohibited from making misrepresentations about refunds and endorsements.

HighDark PatternsNotice Failure

$1.5M

MNSettlementMultistate

Cal-Maine Foods, Inc.

Attorney General Ellison secured a settlement with Cal-Maine Foods, Versova/Centrum, and Hickman's Egg Ranch for illegally coordinating to manipulate egg prices. The companies secretly communicated to influence a daily price index, artificially raising costs for consumers. The settlement includes 53 million donated eggs, $3.3 million in payments, and compliance measures.

HighSurveillance Pricing

$3.3M

FTCSettlement

Amazon.com Inc.

The FTC alleged that Amazon knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to identity theft victims whose personal information was used to commit fraud. Amazon agreed to pay a $2.25 million civil penalty and is required to comply with FCRA Section 609(e), provide notice to consumers, and contact victims who previously requested records since April 2024.

HighRecord RetentionNotice Failure

$2.3M

COSettlementMultistate

LivCor, LLC

Colorado Attorney General Phil Weiser, as part of a bipartisan coalition of nine attorneys general, announced a $7 million settlement with LivCor, LLC for its role in an algorithmic rent-fixing scheme. LivCor allegedly used RealPage's revenue management software to share and gather confidential pricing information with competing landlords, artificially inflating rental prices. The settlement requires LivCor to cease using such software, pay $7 million in penalties, and cooperate in ongoing litigation against RealPage.

HighSurveillance PricingUnauthorized Data Sharing

$7.0M

MNSettlementMultistate

LivCor, LLC

Attorney General Ellison, as part of a bipartisan coalition of nine attorneys general, announced a $7 million settlement with property management company LivCor, LLC. The settlement resolves allegations that LivCor used RealPage's revenue management system to illegally share and gather confidential pricing information with competing landlords, enabling them to keep rental prices artificially high. LivCor must cease using such software, refrain from sharing competitively sensitive information, establish an antitrust compliance program, and cooperate in ongoing litigation against RealPage.

HighSurveillance PricingUnauthorized Data Sharing

$7.0M

COSettlementMultistate

GS Labs

Colorado Attorney General Phil Weiser and a bipartisan coalition of 18 attorneys general announced a $4.87 million settlement with GS Labs, a former COVID-19 rapid testing business. The company was found to have violated the Colorado Consumer Protection Act by falsely advertising test results with no wait times, same day appointments, and no out-of-pocket expenses, while overcharging consumers and insurance providers.

HighNotice FailureConsent Failure

$4.9M

FTCSettlementMultistate

American Tax Service (ATS)

The FTC and State of Nevada settled charges against the operators of American Tax Service for impersonating federal and state government tax authorities and making false promises of tax debt relief. The defendants will surrender over $8 million in cash and assets and are banned from debt relief services, tax preparation, telemarketing, and impersonation.

HighNotice Failure

$8.0M

CAEnforcement ActionMultistate

Meta Platforms, Inc.

A bipartisan coalition of state attorneys general began trial against Meta Platforms, Inc., alleging the company knowingly designed addictive features on Facebook and Instagram that harm children and teens, deceived parents about platform safety, and illegally collected personal information from children under 13 without parental consent in violation of COPPA. The states seek monetary penalties, an injunction to stop unlawful practices, and other relief. The trial is being litigated in the U.S. District Court for the Northern District of California.

HighChildren's DataConsent FailureDark Patterns
TXSettlementMultistate

Cal-Maine Foods, Centrum/Versova, and Hickman's Egg Ranch

Texas Attorney General Ken Paxton announced progress distributing over 7 million free eggs secured through June 2026 antitrust settlements with egg producers Cal-Maine Foods, Centrum/Versova, and Hickman's Egg Ranch, resolving claims from an alleged conspiracy to inflate egg prices between 2022 and 2025. Under the agreements, the companies will donate 7 million eggs to Texas food banks and pay a combined $3.3 million to participating states. This is an antitrust enforcement action, not a privacy action, so no privacy violation categories from the taxonomy apply.

High

$3.3M

FTCEnforcement Action

Cliq Inc.

A federal court held Cliq Inc. and its executives Andrew Phillips and John Blaugrund in civil contempt for multiple violations of a 2015 FTC order requiring the payment processor to prevent enabling consumer fraud. The court found the defendants facilitated fraud by processing transactions for high-risk merchants, avoiding fraud monitoring, failing to conduct required underwriting, and ignoring chargeback thresholds. The court imposed $6.5 million in civil contempt sanctions against the defendants.

High

$6.5M

NYSettlement

Uphold HQ, Inc.

New York Attorney General Letitia James secured a $5 million settlement from cryptocurrency platform Uphold HQ, Inc. for promoting Cred’s fraudulent CredEarn investment product as safe and reliable, when Cred was making risky loans to uncreditworthy borrowers in China. Uphold also falsely claimed Cred had comprehensive insurance and promoted the product without registering as a broker or commodity broker-dealer under New York law. As part of the settlement, Uphold will pay $5 million to harmed investors, remit $545,189 from Cred’s bankruptcy to customers, improve due diligence policies for third-party products, and register as a broker with the OAG.

High

$5.0M

VAGuidance

Wall & Associates, Inc.

The Virginia Attorney General issued a consumer warning about predatory practices by tax debt settlement companies, referencing a past successful enforcement action against Wall & Associates, Inc. and CEO P. Mark Yates for violating the Virginia Consumer Protection Act. The Fauquier County Circuit Court ordered the company and CEO to pay over $1.6 million in civil penalties, with additional restitution to consumers pending determination.

High

$1.7M

FTCSettlement

Publishing.com LLC

The FTC alleged that Publishing.com LLC and its principals misled consumers with unsubstantiated earnings claims about their self-publishing programs, failed to disclose material connections with testimonial writers, and imposed hidden conditions on refund requests. The company agreed to pay a $1.5 million penalty and is subject to a proposed consent order prohibiting deceptive earnings claims, misrepresentations about refunds, and undisclosed endorsements. The consent agreement is subject to a 30-day public comment period before becoming final.

High

$1.5M

FTCSettlement

StubHub Holdings, Inc.

The FTC settled charges with StubHub Holdings, Inc. for violating the FTC Act and the FTC’s Rule on Unfair or Deceptive Fees by failing to disclose total ticket prices including all mandatory fees up-front on its website. StubHub will pay $10 million, which will be used to provide refunds to eligible consumers who purchased live event tickets between May 12 and 14, 2025. The stipulated final order also prohibits StubHub from misrepresenting pricing, fees, or material transaction facts, and requires full compliance with the Fees Rule’s disclosure requirements.

High

$10.0M

NJSettlementMultistate

NCL Bahamas, Ltd.

New Jersey Attorney General Jennifer Davenport announced a multistate settlement with NCL Bahamas, Ltd. (Norwegian Cruise Line) resolving allegations of deceptive sales practices and unfair cancellation, refund, and future cruise credit policies during the COVID-19 pandemic. The settlement requires NCL to pay $2 million to participating states, implement employee training and management approval processes for sales communications during disasters, and prohibits deceptive sales statements and prioritizing sales over consumer health and safety. NCL has already issued over $3 billion in refunds and future cruise credits to consumers nationwide related to the underlying allegations.

High

$2.0M

FTCSettlement

Lindsay Automotive Group

The FTC and Maryland Attorney General announced a settlement with Lindsay Automotive Group resolving allegations of deceptive pricing practices, including advertising falsely low car prices and charging unwanted add-ons, costing consumers over $75 million. Lindsay will provide over $75 million in refunds to eligible consumers and pay a $3.1 million civil penalty to Maryland. The settlement also prohibits deceptive advertising practices and requires clear disclosure of total vehicle prices and express consumer consent for charges.

High

$3.1M

CPPASettlement

PlayOn Sports

The California Privacy Protection Agency settled with PlayOn Sports for $1.10 million over CCPA violations, including failing to provide adequate opt-out mechanisms and improperly tracking users, particularly students. The company must implement proper opt-out methods, improve disclosures, and comply with children's data consent requirements.

HighOpt-Out FailureNotice FailureChildren's Data

$1.1M

CAEnforcement Action

U.S. Department of Agriculture(USDA)

California Attorney General Rob Bonta secured a second preliminary injunction from the U.S. District Court for the Northern District of California blocking the Trump Administration's demand that states turn over personal data of SNAP applicants and recipients. The court found the USDA's proposed data protocol would allow sharing of state data with entities unrelated to federal benefits administration, violating federal law.

HighUnauthorized Data Sharing
CTEnforcement Action

JRK Property Holdings

Connecticut Attorney General William Tong secured a $5.1 million financial relief package for tenants of the Concierge Apartments in Rocky Hill following an investigation into unsafe living conditions and landlord mismanagement. The agreement provides cash payments, free rent, and utility waivers to displaced and affected tenants, with a second agreement pending to address long-term accountability and communications.

High

$5.1M

CASettlement

The Walt Disney Company(Disney)

California Attorney General Rob Bonta announced a $2.75 million settlement with The Walt Disney Company, the largest CCPA settlement in state history, resolving allegations that Disney violated the CCPA by failing to fully honor consumers’ opt-out requests for the sale or sharing of their personal data across all devices and streaming services linked to their accounts. Disney’s opt-out methods, including in-app toggles, webforms, and Global Privacy Control implementation, had gaps that allowed continued data sale or sharing even after consumers opted out. Under the settlement, Disney must pay the civil penalty and implement comprehensive opt-out methods that fully cease all sale or sharing of consumer data upon request.

HighOpt-Out Failure

$2.8M

HHSEnforcement Action

ApolloMD Business Services, LLC

ApolloMD Business Services, LLC (Business Associate, GA) reported a HIPAA breach affecting 626,540 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.

HighData BreachHealth DataSecurity Failure
FTCEnforcement Action

Top Healthcare Options Insurance Agency Inc(Top Healthcare Options)

Telemarketing enforcement case where the FTC obtained a temporary restraining order against defendants who deceptively marketed limited benefit health plans as comprehensive health insurance. The scheme caused tens of millions of dollars in harm to consumers seeking health coverage. The court halted operations at the FTC's request.

High
HHSEnforcement Action

Minnesota Department of Human Services

Minnesota Department of Human Services (Health Plan, MN) reported a HIPAA breach affecting 303,965 individuals. Breach type: Unauthorized Access/Disclosure. Location of breached information: Network Server.

HighData BreachHealth DataUnauthorized Data Sharing

Explore Enforcement Data