Court Rules

Privacy Enforcement Tracker

1,285 enforcement actions from 14 federal and state jurisdictions. Every event traced back to its official government source.

1,285

Total Actions

14

Jurisdictions

$35.3B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
CAEnforcement ActionMultistate

United States Department of Agriculture (USDA)

New York Attorney General Letitia James joined a multistate coalition of 21 attorneys general and Kentucky in filing a lawsuit against the U.S. Department of Agriculture (USDA) challenging its illegal demand for personally identifiable information of over 40 million SNAP recipients. The coalition alleges the USDA’s requirement that states turn over SNAP recipients’ Social Security numbers, addresses, and immigration statuses violates federal and state laws prohibiting disclosure of SNAP data for non-program purposes, and that the data will be shared across federal agencies for unauthorized immigration enforcement. The coalition seeks a declaratory judgment declaring the policy illegal and a nationwide injunction preventing enforcement of the data demand.

CriticalUnauthorized Data Sharing
NYEnforcement ActionMultistate

Elon Musk and DOGE(DOGE)

New York Attorney General Letitia James led a multistate coalition to sue the Trump administration for allowing Elon Musk and DOGE unauthorized access to the Treasury Department's central payment system, exposing Americans' sensitive personal information. A federal court granted a preliminary injunction blocking this access and ordering the destruction of any obtained records.

CriticalUnauthorized Data Sharing
CTEnforcement ActionMultistate

Department of Government Efficiency (DOGE)(DOGE)

Connecticut Attorney General William Tong, leading a coalition of 19 attorneys general, secured a temporary restraining order blocking DOGE and Elon Musk from accessing Treasury Department payment systems containing sensitive personal data. The court found the Trump Administration illegally granted unauthorized access, exposing Americans' bank account details and Social Security numbers. The order mandates destruction of downloaded materials and restricts access to vetted civil servants.

CriticalData BreachUnauthorized Data Sharing
CTEnforcement ActionMultistate

Treasury Department(U.S. Treasury)

Connecticut Attorney General William Tong joined a coalition of 19 attorneys general in suing President Trump and the U.S. Treasury to stop DOGE's unauthorized access to the Treasury's central payment system and confidential records, calling it the largest data breach in American history. The lawsuit seeks an injunction to block the expanded access policy and a declaration that it is unlawful.

CriticalUnauthorized Data SharingData Breach
HHSEnforcement Action

Geisinger

Geisinger (Healthcare Provider, PA) reported a HIPAA breach affecting 1,276,026 individuals. Breach type: Unauthorized Access/Disclosure. Location of breached information: Network Server.

CriticalData BreachHealth DataUnauthorized Data Sharing
HHSEnforcement Action

Kaiser Foundation Health Plan, Inc.

Kaiser Foundation Health Plan, Inc. (Health Plan, CA) reported a HIPAA breach affecting 13,400,000 individuals. Breach type: Unauthorized Access/Disclosure. Location of breached information: Network Server.

CriticalData BreachHealth DataUnauthorized Data Sharing
CTSettlementMultistate

Publicis Health(Publicis)

Connecticut Attorney General announced a $350 million national settlement with Publicis Health for its role in the opioid epidemic. Publicis will pay the settlement, disclose internal documents, and cease accepting opioid-related client work. Connecticut will receive nearly $4.44 million from the settlement.

CriticalUnauthorized Data SharingConsent FailureHealth Data

$350.0M

FTCSettlement

Avast

The FTC settled with Avast for deceiving customers by claiming its antivirus software blocked tracking while secretly collecting and selling browsing data. Avast must pay $16.5 million in refunds and is banned from such practices. The FTC is now processing claims for affected consumers.

CriticalNotice FailureUnauthorized Data Sharing

$16.5M

FTCSettlement

Vivint Smart Homes, Inc.(Vivint)

The FTC settled with Vivint Smart Homes, Inc. for $20 million over allegations that the company misused consumer credit reports to secure financing for unqualified customers, harming consumers' credit. The FTC is now distributing approximately $500,000 in refunds to affected consumers.

CriticalUnauthorized Data SharingConsent Failure

$20.0M

FTCSettlement

Vivint Smart Home, Inc.(Vivint)

The FTC settled with Vivint Smart Home, Inc. for misusing consumer credit reports to qualify customers for financing without permission, harming innocent third parties' credit. Vivint agreed to pay $20 million, with over $4.7 million for consumer compensation, and established a Customer Service Task Force.

CriticalUnauthorized Data Sharing

$20.0M

FTCConsent Decree

Midwest Recovery Systems(Midwest Recovery)

The FTC settled with Midwest Recovery Systems for engaging in 'debt parking,' where it placed inaccurate debts on consumers' credit reports to force payment. The company collected over $24 million from such debts. The settlement requires it to delete all reported debts, stop the practice, and pay a $24.3 million monetary judgment.

CriticalUnauthorized Data SharingHealth Data

$24.3M

CASettlement

Comcast

Comcast disclosed personal information of approximately 75,000 customers who had paid for unlisted VOIP phone service. The settlement includes a $25 million penalty and $8 million in restitution, along with a permanent injunction requiring improved privacy practices and customer disclosures.

CriticalUnauthorized Data Sharing

$25.0M

Explore Enforcement Data