Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
MNEnforcement Action

L’Oréal and its subsidiaries

Minnesota Attorney General Keith Ellison filed a consumer-protection lawsuit alleging that L’Oréal and its subsidiaries marketed chemical hair relaxers as safe while concealing cancer risks, particularly from Black women and girls. The state seeks civil penalties, consumer restitution, and an injunction requiring adequate health-risk warnings; these are requested remedies, not an outcome reported in the release.

Low
NYSettlement

BCMB1 Trust, First Age LLC, NS194 LLC, Second Start LLC, and Southern MBA Trust

The New York Attorney General investigated a group of debt buyers for filing foreclosure actions seeking payment of long-expired mortgage debts. The companies agreed to pay $240,000 in penalties and more than $242,000 in consumer restitution, stop seeking payment of time-barred debts, and amend claims in pending foreclosure cases.

Medium

$240K

MNCoalitionMultistate

Minnesota Attorney General's Office

Minnesota Attorney General Keith Ellison joined a coalition of 22 attorneys general in filing an amicus brief opposing the federal government’s lawsuit concerning California’s voter rolls. The press release describes election litigation and does not announce a privacy enforcement action, penalty, or remedy.

Low
CTSettlementMultistate

Mylan

Connecticut announced an $8 million settlement with Mylan over allegations that it used agreements to delay generic EpiPen competitors and took other actions that inflated prices. Mylan also agreed to provide 10,000 free EpiPens; the release states that Mylan denies wrongdoing.

High

$8.0M

NYSettlement

NovaTechFx and AWS Mining Pty Ltd.

The New York Attorney General secured disgorgement settlements totaling $5,975,861 from four promoters of NovaTech and AWS Mining over fraudulent investment claims and an illegal pyramid scheme. The promoters were permanently banned from the securities, commodities, and cryptocurrency industries; the Attorney General separately asked the court to order NovaTech’s founders to pay $1.3 billion, which was not yet an order.

High

$6.0M

VACoalitionMultistate

U.S. Department of Homeland Security

Virginia Attorney General Jay Jones joined a coalition of attorneys general in filing an amicus brief challenging DHS’s practice of conducting warrantless civil immigration arrests without determining whether individuals are likely to escape before a warrant can be obtained. The release reports that a district court had previously granted a preliminary injunction in the underlying case; it does not report a penalty or a new remedy imposed on DHS by this brief.

Low
FTCEnforcement Action

GovAssist LLC, Entry LLC, and Scott Zuckerman

The FTC filed a complaint alleging that GovAssist LLC, Entry LLC, and Scott Zuckerman used deceptive paid search ads, misleading service and pricing claims, and fake reviews to deceive consumers seeking passport services. The complaint alleges violations of the FTC Act, the Impersonation Rule, and the Gramm-Leach-Bliley Act; the case will be decided by the court, and no penalty or remedy is reported as imposed.

Low
TXSettlement

Lululemon USA Inc.

Texas Attorney General Ken Paxton secured an Assurance of Voluntary Compliance with Lululemon USA Inc. after investigating potential PFAS and consumer representations about product safety. The agreement requires the company to maintain supply-chain chemical standards, verify vendor compliance through testing or certifications, and take corrective action for three years; no monetary penalty is stated.

Low
CORegulatory Report

Colorado Domestic Violence Fatality Review Board

The Colorado Domestic Violence Fatality Review Board’s 2026 report describes domestic violence fatalities in Colorado and identifies trends and prevention opportunities. It is a public report, not a privacy enforcement action, and the release announces no penalty or remedy.

Low
CTCoalitionMultistate

U.S. Department of Homeland Security

Connecticut Attorney General William Tong joined a coalition of 22 attorneys general in filing an amicus brief challenging DHS’s policy and practice of conducting warrantless civil immigration arrests. The press release describes a court challenge, not a privacy enforcement action or monetary penalty.

Low
MNGuidance

Office of Minnesota Attorney General Keith Ellison

Minnesota Attorney General Keith Ellison released an election incident reporting form and updated guidance concerning intimidation, deceptive election information, and deepfakes. The release invites reports and says the Office may investigate matters that may violate Minnesota law; it does not announce a settlement, penalty, or other enforcement remedy.

Low
NYSettlement

T-Mobile USA, Inc.

New York Attorney General Letitia James secured a settlement after T-Mobile raised prices on plans it had advertised with a promise that prices would never change. T-Mobile must offer affected customers refunds and other benefits, honor price guarantees through at least 2029 for customers who remain, clearly disclose limitations on future guarantees, and pay New York $98,000.

Low

$98K

FTCRegulatory Report

Federal Trade Commission

The FTC issued its annual report to Congress describing fraud trends affecting older adults and the agency’s enforcement, education, and outreach efforts. The report is not a specific privacy enforcement action and announces no penalty or remedy.

Low
COEnforcement ActionMultistate

PlayPower and Burke

Colorado, the FTC, and a bipartisan group of state attorneys general filed suit to block PlayPower’s proposed acquisition of Burke, alleging the merger would reduce competition in the commercial playground equipment market. They ask the court to permanently enjoin the merger and award costs, attorneys’ fees, and other appropriate relief.

Low
CTSettlementMultistate

Boston Children’s Health Physicians and XTIUM

Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.

HighData BreachSecurity FailureHealth Data

$2.6M

TXSettlement

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

HighSecurity FailureUnauthorized Data Sharing

$3.0M

CTSettlement

Frontier Communications Parent Inc.

Connecticut reached a $625,000 settlement with Frontier Communications Parent Inc. over an April 2024 breach in which compromised employee and vendor credentials were used to access internal systems and exfiltrate unencrypted personal information of 58,841 Connecticut residents. The settlement requires Frontier to strengthen its security program, implement specific safeguards and training, and obtain an independent third-party assessment.

MediumData BreachSecurity Failure

$625K

MNGuidance

Trajector Holdings, LLC

Minnesota Attorney General Keith Ellison issued a consumer alert explaining how veterans, their families, and others who believe Trajector Holdings owes them money can file claims in the company’s Chapter 11 bankruptcy. The release announces no privacy violation, enforcement penalty, or remedy against the company.

Low
NYSettlementMultistate

Boston Children’s Health Physicians, LLP and XTIUM

New York and Connecticut reached a settlement with Boston Children’s Health Physicians and its IT security provider, XTIUM, after a 2024 breach exposed private information of approximately 825,000 New York residents and 62,871 Connecticut residents. The companies will pay $2.64 million and implement enhanced cybersecurity measures; additional penalties are conditional on violating the settlement.

HighData BreachSecurity FailureEmployee Data

$2.6M

TXSettlementMultistate

Albertsons Companies, Inc.

Texas Attorney General Ken Paxton announced that a multistate coalition had secured an opioid settlement with Albertsons, which would require the grocery chain to pay more than $773 million nationally once final. Texas and its political subdivisions may receive up to $57.8 million for opioid abatement; the release does not identify privacy violations.

Critical

$773.0M

NYSettlement

DolGen New York, LLC and Dollar General Corporation

New York Attorney General Letitia James secured a settlement after an investigation found Dollar General stores routinely charged customers more than advertised or posted prices and issued confusing receipts. Dollar General must donate $1.875 million in food and personal items to Foodlink and implement pricing, receipt, training, and audit reforms.

High

$1.9M

VACoalitionMultistate

Character Technologies, Inc.

Virginia joined a multistate coalition filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s privacy and safety practices and the sensitive chatbot conversations it holds. The filing seeks protections for children and consumers in any sale or transfer of the business or assets; the release does not report a fine or final finding of violations.

LowChildren's DataHealth Data
FTCEnforcement Action

REPS & Company Inc.

The FTC referred a complaint against REPS & Company Inc. and company executives, alleging they bypassed ticket-issuer security controls and purchasing limits to acquire millions of tickets for resale. The complaint was filed by the Department of Justice, and the case will be decided by the court; the press release does not report a penalty or other remedy imposed.

Low
NYCoalitionMultistate

U.S. Department of Justice

New York Attorney General Letitia James joined 16 other attorneys general in urging Congress to pass proposed legislation addressing the federal government’s release of Jeffrey Epstein-related records. The press release says DOJ has not fully disclosed the records required by the original law and that personal information of at least 43 victims was exposed in released files; this is a legislative advocacy announcement, not an enforcement action imposing a penalty or remedy.

LowData Breach
NJCoalitionMultistate

Character Technologies, Inc.

New Jersey joined a coalition of state attorneys general in filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive conversations it holds, including those involving children and mental health. The states seek safeguards for consumers’ personal information in any sale or transfer of the company’s business or assets; the release does not report a fine or final finding of violations.

LowChildren's DataHealth Data
NYGuidance

New York State Office of the Attorney General

New York Attorney General Letitia James released an updated guide warning voters that AI-generated election content and chatbots may provide misleading information. This is public guidance, not an enforcement action, and the release describes no penalty or privacy violation.

Low
CTCoalitionMultistate

Character Technologies, Inc.

Connecticut joined a coalition of state attorneys general filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive information it holds. The states seek protections for children and consumers if the company’s business or assets are sold or transferred; the filing does not impose a fine or other remedy.

LowChildren's DataHealth Data
FTCEnforcement Action

Accelerated Debt Settlement Inc.; ADS Resolve LLC; Financial Solutions Group LLC; Unified Capital Services LLC; Mediwerks; Resolution Specialists LLC; and Futura Capital

A federal court entered a $106.8 million default judgment against corporate defendants in an alleged debt-relief scheme that impersonated banks and government entities and targeted seniors and veterans. The judgment permanently bans the defendants from the debt-relief industry and imposes additional prohibitions, including on impersonation, telemarketing, and misrepresentations.

Critical

$106.8M

NYCoalitionMultistate

Character Technologies, Inc.

New York Attorney General Letitia James and a bipartisan coalition of 39 other attorneys general filed a motion in Character Technologies, Inc.’s bankruptcy, citing risks to children and sensitive user information and potential violations of state privacy laws. The coalition asks the court, the company, and any prospective buyer to require meaningful privacy and safety protections; no fine or final remedy is reported.

LowChildren's DataHealth DataConsent Failure
COCoalitionMultistate

Character Technologies, Inc.

Colorado Attorney General Phil Weiser led a multistate coalition in filing a notice in Character Technologies, Inc.’s bankruptcy, citing concerns about the company’s safety and privacy practices and sensitive chatbot conversations involving children and adults. The filing seeks protections in any sale or transfer of the company’s business or assets; no penalty or final remedy is reported.

LowChildren's DataHealth Data

Explore Enforcement Data