Court Rules

Privacy Enforcement Tracker

1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,634

Total Actions

16

Jurisdictions

$49.9B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NJEnforcement Action

Xiao Hu

The New Jersey Bureau of Securities filed a lawsuit against Xiao Hu (aka Mark Hu) and his companies Skyline Technology USA LLC and Thunderbirds.ME, Inc. for allegedly defrauding at least 15 investors out of $2.5 million through unregistered securities offerings. Hu allegedly misappropriated at least $280,000 for personal expenses including a home purchase and vacation, and falsely claimed to have a Ph.D. from Columbia University.

LowConsent FailureNotice Failure
FTCEnforcement Action

National Amendment Assistance

The FTC filed a complaint against National Amendment Assistance and related entities for allegedly deceiving homeowners into paying unlawful upfront fees for mortgage relief services falsely associated with the CARES Act. The court granted a temporary restraining order, and the FTC seeks redress for affected consumers.

LowConsent FailureNotice Failure
FTCEnforcement Action

X Corp.

The Federal Trade Commission is seeking public comment on a petition from X Corp., formerly known as Twitter, to set aside or modify its 2022 settlement order with the agency. The petition argues that the order no longer serves a valid regulatory purpose and that X Corp. has built a world-class privacy program. The Commission will vote after the comment period closes.

LowConsent FailureNotice Failure
FTCEnforcement Action

Amare Global Holdings Inc.

The FTC sued Amare Global Holdings Inc. and its principals for falsely claiming that dietary supplements like Kids Happy Juice and Kids Mood+ could treat or cure depression, anxiety, and ADHD in children and adults. The FTC also alleged the company misled recruits about their potential earnings as 'brand partners' in its multilevel marketing scheme.

LowConsent FailureHealth DataChildren's Data
NJInvestigationMultistate

FIFA

New Jersey and New York Attorneys General announced an investigation into FIFA's ticketing practices for the 2026 World Cup. The investigation focuses on reports that fans were misled about seat locations, faced soaring prices due to variable pricing, and did not receive the tickets they paid for. Subpoenas have been sent to FIFA seeking information about its ticketing practices for matches hosted in New Jersey.

LowNotice FailureConsent FailureDark Patterns
NJGuidance

New Jersey Division of Consumer Affairs

The New Jersey Attorney General and Division of Consumer Affairs issued guidance warning hotels and short-term rental providers against charging hidden junk fees to consumers ahead of the 2026 FIFA World Cup. The guidance reminds businesses that New Jersey's consumer protection laws and the FTC's Unfair or Deceptive Fees Rule require transparent pricing and prohibit deceptive fee practices. No monetary penalties were imposed, but businesses are put on notice that violations may lead to enforcement actions.

LowNotice FailureConsent Failure
COEnforcement Action

Xinbi Co., Ltd.

The Colorado Attorney General announced a major enforcement sweep targeting thousands of fraudulently filed businesses that used false information in Colorado registrations to facilitate scams including cryptocurrency fraud, investment fraud, and romance scams. The lawsuits seek court orders to dissolve these entities and the AG's office worked to take down associated websites.

LowNotice FailureConsent Failure
COSettlement

AIH Enterprises, LLC

The Colorado Attorney General shut down Smokin' Genie, a Fort Collins smoke shop owned by AIH Enterprises, LLC, and banned its owner from the industry for five years after the shop illegally sold kratom to a minor and failed to properly label kratom products. The settlement requires the store to cease operations, destroy inventory, and pay $200,000 if they violate the terms.

LowNotice FailureConsent Failure
TXInvestigation

Meta (formerly known as Facebook)

Texas Attorney General Ken Paxton launched an investigation into Meta's Meta AI Glasses over allegations of unlawful facial biometric data collection, deceptive privacy practices, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses' always-on recording mode lacks proper user notice, planned facial recognition features would collect data without consent, and private user videos are accessed by third-party annotators in Kenya. The AG issued a Civil Investigative Demand to Meta to determine violations of Texas privacy laws.

LowBiometric DataConsent FailureUnauthorized Data Sharing
FTCWarning Letter

12 Unnamed Nudify Tool Providers

The FTC sent warning letters to 12 companies offering 'nudify' tools that generate nonconsensual intimate images, for failing to comply with the TAKE IT DOWN Act (TIDA) by not providing a mechanism for victims to request removal of such content. The letters urge immediate compliance with TIDA, which requires platforms to remove nonconsensual intimate images within 48 hours of a valid request. Noncompliant companies may face future legal action and civil penalties of up to $53,088 per violation.

LowConsent Failure
TXInvestigation

Meta

Texas Attorney General Ken Paxton launched an investigation into Meta regarding its Meta AI Glasses, alleging unlawful collection of facial biometric data, deceptive privacy representations, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses’ always-on recording mode lacks proper notice, subcontractors access private user content including intimate moments, and Meta plans to deploy facial recognition technology to collect unsuspecting individuals’ facial geometry. The AG issued a Civil Investigative Demand to determine if Meta violated Texas law by deceptively misrepresenting its data use practices.

LowBiometric DataNotice FailureConsent Failure
FTCEnforcement Action

Covered Platforms

The FTC began enforcing the TAKE IT DOWN Act on May 19, 2026, a law requiring covered platforms to establish a process for victims to request removal of nonconsensual intimate images and delete such content within 48 hours of a valid request. The agency launched a consumer complaint portal, issued compliance guidance for businesses and consumers, and sent reminder letters to major platforms including Meta, TikTok, and X about their obligations under the law. No specific penalties or enforcement actions against individual companies were announced in this release.

LowConsent FailureChildren's Data
CTNew Law

Bad actor platforms

Connecticut’s legislature passed House Bill 5312, creating new civil enforcement mechanisms for deepfake digital sexual assault, including unauthorized dissemination of synthetically created intimate images and AI-generated child pornography. The bill establishes a private right of action for victims and empowers the Connecticut Attorney General to pursue civil injunctions and penalties against abusers and platforms hosting illegal content. This builds on prior Connecticut laws criminalizing unauthorized intimate image dissemination.

LowConsent FailureChildren's Data
FTCSettlement

Kochava, Inc. and Collective Data Solutions (CDS)

The FTC settled charges with data broker Kochava, Inc. and its subsidiary Collective Data Solutions (CDS) over allegations that they sold precise location data from hundreds of millions of mobile devices without consumer consent, enabling tracking of visits to sensitive locations like reproductive health clinics and places of worship. The settlement prohibits the companies from selling or sharing sensitive location data without affirmative express consumer consent, and imposes compliance requirements including a sensitive location data program, supplier consent assessments, incident reporting, and data retention schedules. No monetary penalty was imposed.

LowConsent FailureGeolocation DataUnauthorized Data Sharing
CTNew Law

social media companies

Connecticut Attorney General William Tong issued a statement on May 1, 2026, announcing the final passage of bipartisan legislation targeting youth social media addiction and artificial intelligence harms. The legislation imposes new obligations on social media companies regarding minor account settings, parental consent, and reporting, as well as requirements for AI chatbot operators and employers using automated decision tools. The statement also references ongoing enforcement actions against Meta and TikTok for allegedly designing addictive platform features for youth.

LowChildren's DataAI/Automated DecisionsConsent Failure
FTCEnforcement Action

Innovative Partners, LP; American Collective, LP; Papyrus Green Investments LLC; Health Plan Administrators, LLC; Amani Ibrahim Shokry; Ahmed Ibrihim Shokry

The FTC filed a complaint and obtained a temporary restraining order against six defendants operating a deceptive health care scheme that impersonated government and insurance carriers to sell fake comprehensive health plans. The defendants allegedly charged consumers without express informed consent, failed to disclose material terms including cancellation processes, and misled consumers into paying for inadequate coverage that left many with substantial medical debt. The FTC seeks refunds for affected consumers and alleges violations of the FTC Act, Telemarketing Sales Rule, Impersonation Rule, and Gramm-Leach-Bliley Act.

LowConsent FailureNotice Failure
FTCSettlement

Humor Rainbow, Inc. and Match Group Americas

The FTC settled with Humor Rainbow, Inc. (operator of OkCupid) and Match Group Americas over allegations that OkCupid deceived users by sharing personal data including photos and location information with an unauthorized third party, contrary to its privacy policy promises to inform users and provide opt-out opportunities. The settlement permanently prohibits the companies from misrepresenting their data collection, use, disclosure, and privacy control practices. No monetary penalty was imposed.

LowOpt-Out FailureNotice FailureUnauthorized Data Sharing
FLInvestigation

Discord

Florida Attorney General James Uthmeier opened a civil investigation into Discord and issued a subpoena demanding documents related to its marketing to children, age-verification processes, content moderation, parental controls, and reporting of child exploitative activity. The investigation alleges potential violations of Florida’s Deceptive and Unfair Trade Practices Act, citing the platform’s widespread use by child predators to target minors. Discord must produce records on its child safety practices, minor user data, and complaint handling related to child exploitation.

LowChildren's DataConsent Failure
CAEnforcement ActionMultistate

GoFundMe

California Attorney General Rob Bonta, co-leading a bipartisan coalition of 21 attorneys general and charitable regulators, sent a letter to GoFundMe demanding the platform remove all plagiarized donation web pages for over 1.4 million charities, disclose information about donations, and ensure pages do not outrank official charity sites in search results. The action follows reports that GoFundMe used charities' information without consent and engaged in deceptive solicitations, violating state charitable solicitation and consumer protection laws.

LowConsent Failure
TXSettlement

Samsung Electronics America, Inc.(Samsung)

Texas Attorney General Ken Paxton reached an agreement with Samsung Electronics America, Inc. to stop collecting Automated Content Recognition (ACR) data from smart TVs without consumers' express consent. Samsung must update its smart TVs to provide clear and conspicuous disclosures and obtain consent before any data collection, ensuring Texans are informed and in control of their viewing data.

LowConsent FailureNotice Failure
FTCGuidance

Website and Online Service Operators(Online Service Operators)

The FTC issued a policy statement announcing it will not enforce COPPA against operators that collect age verification data under specific conditions. The policy aims to encourage the use of age verification technologies to protect children online. Operators must limit data use, ensure security, provide notice, and use accurate verification methods.

LowChildren's DataConsent FailureNotice Failure
CANew Law

California Privacy Protection Agency (CalPrivacy)

CalPrivacy sponsored AB 2021, the Whistleblower Protection and Privacy Act, introduced by Assemblymember Pilar Schiavo. The bill establishes whistleblower protections under the CCPA, including an award program and anti-retaliation provisions, to encourage insiders to report privacy violations.

LowNotice FailureUnauthorized Data SharingConsent Failure
TXEnforcement Action

PDD Holdings, Inc. and WhaleCo Inc. d/b/a Temu

Texas Attorney General Ken Paxton filed a lawsuit against PDD Holdings, Inc. and WhaleCo Inc., doing business as Temu, for deceptive marketing and unlawful covert harvesting of Texans’ personal data that was exposed to the Chinese Communist Party. The suit alleges Temu functions as a 'trojan horse' e-commerce app that bypasses security protocols to create a backdoor into users’ private data, which is stored on servers in China. The lawsuit seeks monetary relief under the Texas Deceptive Trade Practices Act, including up to $10,000 per violation and up to $250,000 per violation targeting consumers aged 65 or older.

LowConsent FailureUnauthorized Data SharingSecurity Failure
NYWarning LetterMultistate

xAI

A bipartisan coalition of 35 state attorneys general led by New York Attorney General Letitia James sent a demand letter to xAI on January 26, 2026, requiring the company to address its Grok chatbot’s creation and sharing of nonconsensual intimate images, including child sexual abuse material. The AGs demand that xAI implement safeguards to prevent Grok from generating such content, delete existing harmful content, suspend offending users, and give X users control over whether their content can be edited by Grok. No monetary penalty has been imposed as this is a pre-enforcement demand for action.

LowConsent FailureChildren's DataUnauthorized Data Sharing
FTCConsent Decree

General Motors LLC, General Motors Holdings LLC, and OnStar, LLC(General Motors)

Privacy enforcement action where the FTC settled with General Motors and OnStar for collecting and selling consumers' geolocation and driving behavior data without adequate notice or consent. The order prohibits sharing data with consumer reporting agencies and requires transparency and consumer choice measures.

LowGeolocation DataConsent FailureUnauthorized Data Sharing
CAInvestigation

xAI

California Attorney General Rob Bonta announced an investigation into xAI for its Grok AI model generating nonconsensual sexual images of women and children, including child sexual abuse material. The AG expressed deep concern and zero tolerance, urging immediate action to prevent further

LowChildren's DataConsent Failure
FTCEnforcement Action

JustAnswer LLC(JustAnswer)

Consumer fraud case where the FTC sued JustAnswer LLC for deceiving consumers into enrolling in a costly recurring monthly subscription by falsely claiming low one-time fees. The company did not obtain affirmative consent or clearly disclose subscription terms, violating ROSCA and the FTC Act. The FTC seeks an injunction, consumer refunds, and civil penalties.

LowConsent FailureNotice Failure
TXEnforcement Action

Sony, Samsung, LG, Hisense, TCL Technology Group(Sony, Samsung, LG, Hisense, TCL)

Texas Attorney General Ken Paxton filed a lawsuit against Sony, Samsung, LG, Hisense, and TCL Technology Group for using Automated Content Recognition (ACR) technology to collect Texans' viewing data without proper consent. A temporary restraining order was secured against Hisense to halt all data collection and sharing. The AG issued a consumer alert with instructions to disable ACR on smart TVs.

LowConsent FailureNotice FailureUnauthorized Data Sharing
TXEnforcement Action

Hisense

Texas Attorney General Ken Paxton obtained a temporary restraining order against Hisense, a Chinese smart TV manufacturer, to halt its collection of Texans' personal data through Automated Content Recognition technology without consent. The technology captures every sound and image on the TVs every 500 milliseconds and sells the data, with access granted to the Chinese Communist Party. The TRO prohibits Hisense from collecting, using, selling, sharing, disclosing, or transferring ACR data about Texans while the case continues.

LowConsent FailureUnauthorized Data Sharing
TXEnforcement Action

Sony, Samsung, LG, Hisense, TCL Technology Group Corporation(Sony, Samsung, LG, Hisense, TCL)

Texas Attorney General Ken Paxton filed a lawsuit against five major TV manufacturers—Sony, Samsung, LG, Hisense, and TCL—for illegally collecting consumers' viewing data through Automated Content Recognition (ACR) technology without knowledge or consent. The companies capture screenshots and monitor TV usage in real-time, then sell the data for targeted advertising, risking sensitive information. The suit seeks to halt these invasive practices and protect Texans' privacy.

LowConsent FailureNotice FailureUnauthorized Data Sharing

Explore Enforcement Data