Court Rules

Privacy Enforcement Tracker

1,285 enforcement actions from 14 federal and state jurisdictions. Every event traced back to its official government source.

1,285

Total Actions

14

Jurisdictions

$35.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
TXSettlementMultistate

Agri Stats, Inc.

Texas Attorney General Ken Paxton and the U.S. Department of Justice secured a settlement with agricultural data broker Agri Stats, Inc. for facilitating the sharing of competitively sensitive information among meat processors, reducing competition and raising prices for chicken, pork, and turkey. Under the settlement, Agri Stats will implement industry-wide changes to its information distribution practices and make monetary payments to participating states. The settlement aims to restore competition in the agriculture industry and lower grocery prices for consumers.

Critical
TXSettlementMultistate

Purdue Pharma, Inc. and the Sackler Family

Texas Attorney General Ken Paxton announced the effective date of a $7.4 billion settlement with Purdue Pharma, Inc. and the Sackler family over their role in fueling the opioid crisis. Texas will receive $286.5 million from the settlement, bringing the state’s total opioid recovery funds to over $3 billion. The settlement includes permanent bans on Sackler opioid sales in the U.S., public release of 30 million company documents, and distribution of funds for addiction treatment and prevention over 15 years.

Critical

$7.4B

FTCEnforcement Action

Christopher Carroll

Following an FTC investigation, a federal court granted summary judgment against timeshare exit scheme operator Christopher Carroll, ordering him to pay $140 million total ($95 million in consumer redress, $45 million civil penalty) for defrauding consumers out of over $90 million. The scheme used deceptive direct mail and in-person pitches, falsely claimed affiliation with timeshare companies, failed to provide refunds, and violated the FTC’s Cooling-Off Rule by forcing consumers to sign non-cancellable contracts. Carroll is also permanently banned from marketing timeshare exit services or engaging in deceptive door-to-door sales.

Critical

$140.0M

FTCConsent Decree

Air AI

Consumer fraud enforcement action where the FTC settled with Air AI for misleading entrepreneurs with false earnings and refund guarantees. The company will be banned from marketing business opportunities and pay a suspended $18 million judgment with $50,000 for consumer relief. Violations included failure to provide required disclosures and false claims under the Telemarketing Sales Rule and Business Opportunity Rule.

CriticalNotice Failure

$18.0M

OREnforcement ActionMultistate

U.S. Department of Agriculture

Consumer protection and civil rights lawsuit filed by Oregon AG and 20 other states against the U.S. Department of Agriculture over unlawful funding conditions that coerce states into complying with policies unrelated to nutrition programs. The conditions relate to immigration, DEI, and gender identity, and are alleged to violate the Spending Clause and Administrative Procedure Act. The suit seeks to block these conditions to protect billions in funding for programs like SNAP, WIC, and school lunches that serve vulnerable populations.

CriticalNotice Failure
OREnforcement ActionMultistate

Trump Administration

Health enforcement action: Attorney General Rayfield led a coalition of 22 states and D.C. to secure a federal court order blocking the Trump Administration from threatening to cut off Medicare and Medicaid funding to healthcare providers that offer gender-affirming care to youth with gender dysphoria. The court ruled the administration's actions unlawful, protecting access to care and upholding the right to make personal healthcare decisions.

Critical
OREnforcement ActionMultistate

Nexstar Media Group, Inc. and Tegna Inc.(Nexstar and Tegna)

Antitrust enforcement action where Oregon AG filed a lawsuit to block the $6.2 billion merger of Nexstar and Tegna, alleging it violates Clayton Act Section 7 by substantially lessening competition in broadcasting, which could harm local news and raise consumer prices.

Critical
FTCSettlement

Xponential Fitness

Consumer fraud enforcement action where the FTC settled with Xponential Fitness for violating the Franchise Rule by misrepresenting key information to franchisees, including time to open and costs. The settlement includes a $17 million monetary judgment for redress and prohibits future misrepresentations.

CriticalNotice Failure

$17.0M

CAEnforcement ActionMultistate

Nexstar Media Group, Inc. and Tegna Inc.(Nexstar Media Group and Tegna)

California Attorney General Rob Bonta, joined by attorneys general from seven other states, filed a lawsuit to block the $6.2 billion merger between Nexstar Media Group and Tegna Inc. The lawsuit alleges the merger violates Section 7 of the Clayton Act by reducing competition in local TV markets, leading to higher prices, less local news, and job losses.

Critical
WAEnforcement ActionMultistate

U.S. Department of Education

Attorney General Nick Brown of Washington led a coalition of 17 state attorneys general in filing a lawsuit against the U.S. Department of Education on March 11, 2026, challenging new requirements for the IPEDS survey that demand race- and sex-disaggregated student data retroactive seven years. The coalition alleges the rushed rule violates the law, jeopardizes student privacy by collecting in-depth student information, and imposes undue burdens on institutions with unclear data definitions and risk of severe penalties for errors. The lawsuit seeks to invalidate the rule, arguing it was arbitrarily implemented without proper procedure and poses widespread privacy risks to students.

CriticalStudent Data
FTCSettlementMultistate

Walmart, Inc.(Walmart)

The FTC and 11 states settled with Walmart for $100 million over deceptive earnings claims in its Spark Driver gig worker app, where drivers were misled about base pay, tips, and incentives. The settlement also addressed GLBA violations for failing to provide proper notice regarding the handling of drivers' financial information. Walmart must implement an earnings verification program and is banned from misrepresenting driver earnings.

CriticalDark PatternsNotice Failure

$100.0M

HHSEnforcement Action

QualDerm Partners, LLC

QualDerm Partners, LLC (Healthcare Provider, TN) reported a HIPAA breach affecting 3,117,874 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.

CriticalData BreachHealth DataSecurity Failure
TXInvestigation

Blue Cross Blue Shield of Texas and Conduent Business Services LLC(Blue Cross Blue Shield and Conduent)

Texas Attorney General Ken Paxton issued Civil Investigative Demands to Blue Cross Blue Shield of Texas and Conduent Business Services LLC as part of an investigation into a massive data breach at Conduent that exposed the protected health information of approximately four million Texans. The breach occurred between October 21, 2024 and January 13, 2025, affecting Texas Medicaid recipients and other residents. The AG's office is investigating the security failures and compliance with Texas law.

CriticalData BreachHealth DataSecurity Failure
HHSEnforcement Action

TriZetto Provider Solutions

TriZetto Provider Solutions (Business Associate, MO) reported a HIPAA breach affecting 3,433,965 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.

CriticalData BreachHealth DataSecurity Failure
FTCEnforcement Action

Sanctuary Belize

Consumer fraud enforcement action where the FTC is distributing $23 million in refunds to investors defrauded by the Sanctuary Belize and Kanantik real estate schemes. The defendants deceived consumers about luxury amenities and resale potential, resulting in losses of over $100 million. This is the second round of refunds following a court judgment.

CriticalNotice Failure

$22.9M

CTSettlementMultistate

Lannett Company, Inc., Bausch Health US, LLC, Bausch Health Americas, Inc.(Bausch Health)

Connecticut Attorney General William Tong led a coalition of 48 states and territories in announcing settlements with Lannett Company, Inc. and Bausch Health entities totaling $17.85 million. The settlements resolve allegations that the companies engaged in conspiracies to inflate prices and limit competition for generic prescription drugs. The companies agreed to cooperate in ongoing litigation and implement internal reforms, while a new complaint was filed against Novartis and subsidiaries.

Critical

$17.9M

FTCSettlement

Growth Cave, LLC(Growth Cave)

Consumer fraud case where the FTC settled with Growth Cave defendants for operating a deceptive business opportunity and credit repair scheme that cost consumers nearly $50 million. The settlement permanently bans them from such activities, requires asset liquidation to pay a $48.6 million judgment, and prohibits misleading earnings claims and AI use.

Critical

$48.6M

CAEnforcement Action

xAI

California Attorney General Rob Bonta sent a cease and desist letter to xAI, demanding the company immediately stop the creation and distribution of deepfake, nonconsensual intimate images and child

CriticalAI/Automated DecisionsChildren's Data
OREnforcement Action

Novo Nordisk, Sanofi, Eli Lilly, Express Scripts, CVS Caremark, Optum

Consumer protection case: Oregon Attorney General filed a lawsuit against six major drug companies and pharmacy benefit managers for allegedly coordinating to inflate insulin prices, seeking $900 million in damages under the Unlawful Trade Practices Act.

CriticalSecurity Failure

$900.0M

ORSettlementMultistate

Mercedes-Benz USA(Mercedes-Benz)

Environmental and consumer protection enforcement action where Mercedes-Benz USA agreed to a nearly $150 million settlement for installing emissions defeat devices in diesel vehicles and misleading consumers about their environmental compliance. The settlement includes significant consumer relief and practice reforms.

CriticalNotice Failure

$149.7M

OREnforcement ActionMultistate

Federal Emergency Management Agency(FEMA)

This legal enforcement action involves Oregon Attorney General Dan Rayfield, leading a coalition of 20 states, securing a court victory against the Trump Administration's unlawful attempt to terminate the BRIC disaster preparedness program. The court ruled that the termination violates appropriations laws and the Administrative Procedures Act, requiring restoration of billions in funding to protect communities from natural disasters.

Critical
ORSettlementMultistate

Google

Antitrust enforcement action where Oregon Attorney General Dan Rayfield secured a $700 million settlement from Google for anticompetitive practices in the Google Play Store. The settlement will provide automatic payouts to consumers who made purchases between August 2016 and September 2023, and requires Google to change its practices to stop the anticompetitive conduct. The settlement is pending court approval as of April 30, 2026.

Critical

$700.0M

CTSettlementMultistate

Purdue Pharma

The U.S. Bankruptcy Court confirmed a $7.4 billion settlement between Purdue Pharma, the Sackler Family, and 55 attorneys general to resolve claims over the opioid crisis. Connecticut will receive up to $64 million for treatment, prevention, and victim support. The settlement bars the Sacklers from selling opioids and requires public disclosure of documents.

Critical

$7.4B

TXSettlement

Google

Texas Attorney General Ken Paxton secured a $1.375 billion settlement with Google for unlawfully tracking Texans' geolocation data, incognito browsing activity, and biometric identifiers without consent. This is the largest single-state privacy settlement against Google, significantly larger than multistate settlements. The agreement resolves two major privacy enforcement actions brought by Texas.

CriticalGeolocation DataConsent FailureBiometric Data

$1.4B

NYSettlement

American Family Mutual Insurance Company/Midvale Indemnity Company, Farmers Insurance, Hagerty Insurance Agency, The Hartford Insurance Group, Infinity Insurance Company, Liberty Mutual Insurance, Metromile, State Auto Mutual Insurance Company(American Family)

New York Attorney General Letitia James secured $14.2 million in settlements from eight car insurance companies for failing to protect consumers' personal information. The companies' inadequate cybersecurity allowed hackers to steal driver's license numbers and other data through online quoting tools, impacting over 825,000 New Yorkers. The settlements require the companies to pay penalties and implement enhanced data security measures.

CriticalSecurity FailureData Breach

$14.2M

NYSettlement

American Family Mutual Insurance Company/Midvale Indemnity Company; Farmers Insurance; Hagerty Insurance Agency; The Hartford Insurance Group; Infinity Insurance Company; Liberty Mutual Insurance; Metromile; State Auto Mutual Insurance Company

New York Attorney General Letitia James secured $14.2 million in settlements from eight car insurance companies for failing to implement reasonable data security controls, leading to data breaches that exposed over 825,000 New Yorkers' personal information including driver's license numbers and dates of birth. Hackers exploited vulnerabilities in the companies' online quoting tools to steal the data, which was later used to file fraudulent unemployment claims during the COVID-19 pandemic. The settlements require the companies to pay penalties and implement enhanced cybersecurity measures including data inventory maintenance, multifactor authentication, and improved threat response procedures.

CriticalData BreachSecurity Failure

$14.2M

FTCSettlement

Amazon.com, Inc.(Amazon)

The FTC secured a $2.5 billion settlement with Amazon, including a $1 billion civil penalty and $1.5 billion in consumer refunds, for enrolling millions of consumers in Prime subscriptions without proper consent and designing a deliberately difficult cancellation process. The order requires Amazon to implement clear enrollment disclosures, an easy cancellation method, and cease the unlawful practices.

CriticalConsent FailureDark PatternsNotice Failure

$1.0B

HHSEnforcement Action

Aflac Incorporated (“Aflac”)

Aflac Incorporated (“Aflac”) (Health Plan, GA) reported a HIPAA breach affecting 13,924,906 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.

CriticalData BreachHealth DataSecurity Failure
HHSEnforcement Action

DaVita Inc.

DaVita Inc. (Healthcare Provider, CO) reported a HIPAA breach affecting 2,689,826 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.

CriticalData BreachHealth DataSecurity Failure
CAEnforcement ActionMultistate

United States Department of Agriculture (USDA)

New York Attorney General Letitia James joined a multistate coalition of 21 attorneys general and Kentucky in filing a lawsuit against the U.S. Department of Agriculture (USDA) challenging its illegal demand for personally identifiable information of over 40 million SNAP recipients. The coalition alleges the USDA’s requirement that states turn over SNAP recipients’ Social Security numbers, addresses, and immigration statuses violates federal and state laws prohibiting disclosure of SNAP data for non-program purposes, and that the data will be shared across federal agencies for unauthorized immigration enforcement. The coalition seeks a declaratory judgment declaring the policy illegal and a nationwide injunction preventing enforcement of the data demand.

CriticalUnauthorized Data Sharing

Explore Enforcement Data