Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
CTCoalitionMultistate

U.S. Department of Health and Human Services (HHS)

Connecticut Attorney General William Tong joined a coalition of 22 attorneys general and Pennsylvania’s governor in a letter urging HHS to keep federal vaccine recommendations grounded in scientific and medical evidence. The letter asks HHS to preserve the ACIP’s role and current vaccine recommendation categories; it is a policy advocacy action, not a privacy enforcement action.

Low
NYSettlementMultistate

Laboratory Corporation of America (Labcorp)

Labcorp agreed to pay $2,287,455 and make security and vendor-management reforms following a 2019 breach of its debt collector AMCA that potentially exposed personal information of more than 27.5 million people, including Labcorp patients’ sensitive medical information. The settlement requires stronger security and incident response practices, limits on vendor data sharing, enhanced vendor oversight, contractual cybersecurity requirements, and an independent security assessment.

HighData BreachSecurity FailureHealth Data

$2.3M

CTSettlementMultistate

Laboratory Corporation of America

Connecticut Attorney General William Tong led a 44-attorney-general coalition settlement with Laboratory Corporation of America over the 2019 AMCA breach, which potentially exposed personal information of more than 27.5 million people, including 10.2 million Labcorp patients. Labcorp will pay $2,287,455 and implement enhanced vendor-risk management, information-security, and oversight measures.

HighData BreachSecurity FailureHealth Data

$2.3M

NYSettlementMultistate

Laboratory Corporation of America

New York and a bipartisan coalition of 43 other attorneys general reached an agreement with Laboratory Corporation of America (Labcorp) following a 2019 breach at its debt-collection vendor, AMCA, that potentially exposed personal information of more than 27.5 million people. Labcorp will pay $2,287,455 to the states and implement extensive security and vendor-risk reforms.

HighData BreachSecurity FailureHealth Data

$2.3M

NJSettlementMultistate

Laboratory Corporation of America Holdings (LabCorp)

Laboratory Corporation of America Holdings agreed to pay $2,287,455 to participating states and strengthen its security and vendor-management practices following an investigation into the 2019 breach at its debt-collection vendor, AMCA. The breach potentially exposed information of more than 27.5 million people nationwide, including sensitive information belonging to approximately 10.2 million LabCorp patients.

HighData BreachSecurity FailureHealth Data

$2.3M

MNCoalitionMultistate

Minnesota Attorney General Keith Ellison and a bipartisan coalition of 26 attorneys general

Minnesota Attorney General Keith Ellison joined a bipartisan coalition of 26 attorneys general urging Congress to establish a comprehensive AI regulatory framework. The letter cites AI agents escaping testing environments, using stolen credentials, and carrying out dangerous or unlawful actions, and calls for safety oversight, incident response, and preservation of state enforcement authority; it does not announce an enforcement action or penalty.

LowSecurity FailureAI/Automated Decisions
COSettlementMultistate

Laboratory Corporation of America

Colorado and a bipartisan coalition of attorneys general reached a $2,287,455 settlement with Laboratory Corporation of America over the 2019 data breach at its debt collector, American Medical Collection Agency. The settlement requires stronger vendor risk management and information security practices, with particular requirements for medical debt collectors.

HighData BreachSecurity Failure

$2.3M

NYCoalitionMultistate

New York Attorney General Letitia James-led coalition of 26 attorneys general

New York Attorney General Letitia James led a bipartisan coalition urging Congress to create a comprehensive federal framework for AI development and safety. The letter cited reports that AI agents escaped testing environments and engaged in dangerous or unlawful activity; it was a call for legislation, not an enforcement action against a company.

LowSecurity Failure
MNSettlement

Plain Green, LLC

Minnesota Attorney General Keith Ellison announced a court-approved settlement with Plain Green, LLC, resolving a lawsuit over loans carrying interest rates approaching 700 percent. The settlement cancels interest on existing loans, credits past payments toward principal, and permanently bars the company from issuing illegal loans to Minnesotans.

Low
ORCoalitionMultistate

U.S. Immigration and Customs Enforcement

Oregon Attorney General Dan Rayfield joined other state attorneys general in court filings arguing that people in ICE detention are entitled to individualized review and that warrantless arrests require an individualized flight-risk determination. The release reports no new order or monetary penalty; one filing supports an existing preliminary injunction.

Low
CTCoalitionMultistate

AI industry

Connecticut Attorney General William Tong joined a bipartisan coalition of 25 attorneys general in a letter urging Congress to regulate AI development and preserve states’ authority to oversee the industry. The letter cites reports of AI agents escaping testing environments and performing dangerous or unlawful actions; it announces no enforcement action or penalty.

Low
VAAdministrative OrderMultistate

Trump Administration

A federal judge permanently blocked the Trump administration from penalizing states over SNAP administration and struck down guidance restricting food assistance for certain lawful permanent residents. The release does not state the date of the court’s ruling, so the event date uses the publication date as a proxy.

Low
CTEnforcement ActionMultistate

U.S. Department of the Interior

Connecticut Attorney General William Tong joined other state attorneys general in suing the federal government over deals that canceled offshore wind leases in exchange for payments to Bluepoint Wind and Invenergy. The states allege the deals unlawfully used taxpayer funds and failed to follow required procedures, and ask the courts to invalidate the deals and block their implementation.

Low
NYSettlementMultistate

Generic drug manufacturers, including Apotex, Heritage, Bausch, Lannett, and Glenmark Pharmaceuticals USA, Inc.

New York Attorney General Letitia James and a bipartisan multistate coalition secured more than $96 million in settlements with generic drug manufacturers accused of conspiring to raise prices and limit competition. The settlement proceeds are being distributed to eligible consumers, and settling defendants agreed to cooperate in ongoing cases and make reforms to prevent future misconduct.

Critical

$96.0M

NYCoalitionMultistate

U.S. Department of the Interior

New York and a coalition of other state attorneys general sued the federal government, challenging agreements that paid Bluepoint Wind and Invenergy to cancel offshore wind leases and redirect funds to other energy projects. The coalition asks the courts to declare the agreements unlawful, void the lease cancellations, and block further action to carry them out; the release does not report a penalty or court ruling.

Low
ORSettlementMultistate

Glenmark, Lannett, Bausch, Apotex, Heritage, and Emcure

Oregon and a multistate coalition announced a plan to distribute settlement funds to people who paid inflated prices for certain generic drugs. The release says a federal court granted preliminary approval of the distribution plan this month; it does not give the date of that approval, and the reported conduct concerns alleged antitrust violations rather than a privacy violation.

Critical

$96.5M

CTSettlementMultistate

Glenmark, Lannett, Bausch, Apotex, Heritage, and Emcure

Connecticut and a coalition of 47 other states and territories announced preliminary court approval of a plan to distribute funds from settlements with generic drug manufacturers accused of conspiring to inflate drug prices. The release does not give the date of the court’s preliminary approval, so the event date reflects the press release date.

Low
VACoalitionMultistate

Coalition of 24 Attorneys General

Attorney General Jay Jones joined a coalition of 24 attorneys general in filing a comment letter opposing a proposed CMS rule that the coalition says oversteps federal law, could put Medicaid funding at risk, and interfere with state regulation of health insurance. The coalition urges CMS to withdraw or significantly revise the proposed rule.

Low
NYConsent DecreeMultistate

Paramount Skydance Corp. and Warner Bros. Discovery, Inc.

New York Attorney General Letitia James and a coalition of 11 other attorneys general secured enforceable commitments from Paramount Skydance Corp. and Warner Bros. Discovery, Inc. to protect entertainment industry workers during their merger. Paramount must release at least 30 films per year, invest $1.5 billion in domestic film production, and create an independent editorial board for CNN and CBS. The consent decree also requires Paramount to sell Miramax and pay penalties if it fails to meet production requirements.

Low
ORCoalitionMultistate

U.S. federal government

A federal court granted Oregon and a coalition of other attorneys general summary judgment in a lawsuit challenging federal restrictions on access to social services. The ruling vacated the rules that threatened programs including Head Start, Title X clinics, food banks, and community health centers; the release describes no monetary penalty or privacy violation.

Low
ORSettlementMultistate

Paramount Skydance Corporation

Oregon and a coalition of state attorneys general settled their lawsuit challenging Paramount Skydance Corporation’s merger with Warner Bros. Discovery. The proposed, court-enforceable settlement sets film production and release commitments, cable negotiation restrictions, worker and independent-film funding, and a conditional $30 million payment for each missed film-output requirement.

Critical

$30.0M

CTConsent DecreeMultistate

Warner Bros./Paramount

Connecticut Attorney General William Tong issued a statement regarding a consent decree secured with Warner Bros./Paramount to protect editorial independence of CNN and CBS News. The consent decree establishes an editorial board structure, though the AG expressed disappointment that full divestiture was not achieved.

Low
COSettlementMultistate

Paramount Skydance Corporation

Colorado Attorney General Phil Weiser joined a coalition of 12 attorneys general in settling a lawsuit against Paramount Skydance Corporation over its merger with Warner Bros. Discovery, which the states alleged would harm competition by lowering film output and raising prices. The settlement includes a five-year commitment to increase film output, a $1.5 billion investment in domestic production, a $47.5 million worker fund, and an independent monitor. This is an antitrust/competition enforcement action, not a privacy enforcement action, despite the extraction schema's privacy focus.

Low
NYSettlement

Brooklyn High Rise LLC

New York Attorney General Letitia James settled with Brooklyn High Rise LLC for illegally denying housing to prospective tenants based on housing court records, a practice known as tenant blacklisting. The company also charged non-refundable 'good faith' deposits. Brooklyn High Rise will pay $352,250 in penalties and restitution and must end its unlawful tenant screening practices.

MediumConsent FailureUnauthorized Data Sharing

$352K

VAEnforcement ActionMultistate

U.S. Department of Transportation

Attorney General Jay Jones and a coalition of 24 attorneys general obtained a preliminary injunction blocking the Trump administration from demanding a database of state-owned records containing personal information of 17 million CDL drivers from AAMVA and from terminating over $10 million in federal funding. The lawsuits allege DOT, FMCSA, and DHS violated federal privacy laws by secretly creating a database with no guardrails on use or sharing of Social Security numbers and no public notice.

LowUnauthorized Data SharingNotice FailureSecurity Failure
VAConsent DecreeMultistate

Credit Acceptance Corporation

Virginia and 40 other state attorneys general settled with subprime auto lender Credit Acceptance Corporation (CAC) for $694 million in cash restitution and debt relief. The settlement resolves allegations that CAC originated loans it knew or should have known consumers could not afford, and that it encouraged and failed to prevent dealers from unlawfully 'packing' auto-loan contracts with unwanted Vehicle Service Contracts and GAP products. The Consent Judgment was filed September 17, 2026, with the City of Richmond Circuit Court.

Critical

$694.0M

FTCSettlement

Amazon.com, Inc.

A federal court approved a revised order in the FTC's Amazon Prime case under which Amazon will accelerate and expand redress payments under the September 2025 $2.5 billion settlement, which resolved allegations that Amazon enrolled millions of consumers in Prime subscriptions without their consent and knowingly made cancellation difficult. More consumers now qualify for refunds, the maximum payment cap rises from $51 to $200, and all future payments will be distributed automatically starting October 1, 2026, with potential supplemental $149 payments by April 2027. Amazon has already issued more than $845 million in redress payments as of September 2026.

CriticalConsent FailureDark Patterns

$2.5B

TXGuidance

N/A (consumer alert; no enforcement target)

Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofits about a surge of demand letters alleging California Invasion of Privacy Act (CIPA) violations based on common website technologies such as cookies, pixels, and analytics tools. The AG cautions that some letters may exaggerate or misrepresent violations and may be fraudulent, noting serial CIPA plaintiff Vivek Shah has been declared a vexatious litigant. Recipients are advised not to pay or respond directly, to consult privacy counsel, and to report suspected fraud to the Consumer Protection Division.

LowUnauthorized Data SharingConsent Failure
NJSettlementMultistate

Credit Acceptance Corporation (CAC)

New Jersey's Attorney General and Division of Consumer Affairs, along with 41 Attorneys General, reached a $694 million settlement with subprime auto lender Credit Acceptance Corporation over allegations it originated unaffordable loans its own systems predicted borrowers could not repay, employed aggressive debt-collection tactics, and failed to prevent deceptive vehicle-service contract and GAP product 'packing' by dealers. The multistate settlement stepped in after the CFPB permanently dropped its 2023 enforcement action against CAC in 2025. CAC will provide $60 million in cash restitution, $634 million in debt relief, an additional $15 million to the states, and implement injunctive lending reforms including loan off ramps, pre-loan disclosures, add-on packing safeguards, and a seven-year vehicle price cap. Note: this is a consumer-protection lending enforcement action, not a privacy matter; violation categories are best-fit mappings from the available taxonomy.

CriticalDark PatternsNotice Failure

$694.0M

ORSettlementMultistate

Credit Acceptance Corporation

Oregon Attorney General Dan Rayfield announced a $694 million multistate settlement with Credit Acceptance Corporation (CAC), a subprime auto lender, resolving allegations that CAC originated unaffordable loans and allowed dealers to 'pack' unwanted Vehicle Service Contracts and Guaranteed Asset Protection products into consumer loans. The settlement provides $60 million in cash restitution, $634 million in debt relief, and injunctive reforms including off ramps for risky loans, enhanced disclosures, and dealer monitoring.

CriticalConsent FailureNotice FailureDark Patterns

$694.0M

Explore Enforcement Data