Court Rules

Privacy Enforcement Tracker

1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,788

Total Actions

16

Jurisdictions

$51.8B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NYSettlement

Carelon Behavioral Health, Inc.

New York Attorney General Letitia James announced settlements with Carelon after investigations found inaccurate mental health provider directories and improper denials of substance use disorder treatment using unapproved criteria. Carelon must pay $2.35 million in penalties, fees, and costs, provide eligible members with restitution or repayment, and change its provider-directory and coverage-review practices.

High

$2.4M

NJSettlementMultistate

Perry Johnson & Associates, Inc.; Perry Johnson, Inc.; Perry Johnson & Associates Coding, Inc.; Perry Johnson & Associates Radiology, Inc.; and Medical Transcription and Coding, Inc.

A March 2023 breach at the Perry Johnson companies exposed personal and protected health information belonging to more than 13.3 million people. The companies agreed to pay at least $300,000 in penalties, with an additional $9.7 million payable if they fail to meet the agreement, and to implement security, incident-response, and data-handling reforms.

HighData BreachSecurity FailureHealth Data

$10.0M

CTSettlementMultistate

Perry Johnson & Associates, Inc.; Perry Johnson, Inc.; Perry Johnson & Associates Coding, Inc.; Perry Johnson & Associates Radiology, Inc.; and Medical Transcription and Coding, Inc.

A March 2023 breach exposed personal and protected health information belonging to more than 13.3 million people after hackers accessed the companies’ systems, including unencrypted files, and security alerts were not properly configured. The companies agreed to pay at least $300,000 in penalties, with up to $9.7 million more due if they fail to comply, and to implement extensive security, incident-response, and data-handling reforms.

HighData BreachHealth DataSecurity Failure

$10.0M

NYSettlementMultistate

Perry Johnson & Associates, Inc.; Perry Johnson, Inc.; Perry Johnson & Associates Coding, Inc.; Perry Johnson & Associates Radiology, Inc.; and Medical Transcription and Coding, Inc.

A March 2023 breach exposed personal and protected health information associated with more than 13.3 million people after attackers accessed company systems using an employee’s credentials. The Perry Johnson companies agreed to pay at least $300,000, with an additional $9.7 million in penalties due if they fail to meet the agreement, and to implement security, incident response, and health-data handling reforms.

HighData BreachSecurity FailureHealth Data

$10.0M

MNSettlementMultistate

General Motors

A bipartisan coalition of 36 attorneys general settled allegations that General Motors collected and sold drivers’ driving-behavior and location data to data brokers, whose customers included insurance companies. GM will pay $220 million nationally, with Minnesota receiving $7,095,664, and must obtain affirmative express consent before collecting or disclosing driving and location data.

HighUnauthorized Data SharingConsent FailureNotice Failure

$7.1M

CTSettlementMultistate

Mylan

Connecticut announced an $8 million settlement with Mylan over allegations that it used agreements to delay generic EpiPen competitors and took other actions that inflated prices. Mylan also agreed to provide 10,000 free EpiPens; the release states that Mylan denies wrongdoing.

High

$8.0M

NYSettlement

NovaTechFx and AWS Mining Pty Ltd.

The New York Attorney General secured disgorgement settlements totaling $5,975,861 from four promoters of NovaTech and AWS Mining over fraudulent investment claims and an illegal pyramid scheme. The promoters were permanently banned from the securities, commodities, and cryptocurrency industries; the Attorney General separately asked the court to order NovaTech’s founders to pay $1.3 billion, which was not yet an order.

High

$6.0M

CTSettlementMultistate

Boston Children’s Health Physicians and XTIUM

Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.

HighData BreachSecurity FailureHealth Data

$2.6M

TXSettlement

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

HighSecurity FailureUnauthorized Data Sharing

$3.0M

NYSettlementMultistate

Boston Children’s Health Physicians, LLP and XTIUM

New York and Connecticut reached a settlement with Boston Children’s Health Physicians and its IT security provider, XTIUM, after a 2024 breach exposed private information of approximately 825,000 New York residents and 62,871 Connecticut residents. The companies will pay $2.64 million and implement enhanced cybersecurity measures; additional penalties are conditional on violating the settlement.

HighData BreachSecurity FailureEmployee Data

$2.6M

NYSettlement

DolGen New York, LLC and Dollar General Corporation

New York Attorney General Letitia James secured a settlement after an investigation found Dollar General stores routinely charged customers more than advertised or posted prices and issued confusing receipts. Dollar General must donate $1.875 million in food and personal items to Foodlink and implement pricing, receipt, training, and audit reforms.

High

$1.9M

CTSettlement

RZ Smoke, Inc.

Connecticut Attorney General William Tong announced a settlement with RZ Smoke, Inc. over allegations that it distributed and sold high-potency cannabis products without a state license. The stipulated judgment is $2 million, with $375,000 payable to the State and $1.6 million suspended to ensure compliance; the company is barred from specified cannabis activities in Connecticut unless licensed.

High

$2.0M

CTSettlementMultistate

Ascend Laboratories, Citron Pharma, and Mayne Pharma

Connecticut Attorney General William Tong led a coalition of 45 states and territories seeking court approval for settlements resolving allegations that Ascend Laboratories, Citron Pharma, and Mayne Pharma conspired to inflate prices and limit competition for generic prescription drugs. Ascend agreed to pay $400,000, Mayne agreed to pay $650,000, and Citron’s settlement includes non-monetary terms; the companies also agreed to internal reforms.

High

$1.1M

TXEnforcement Action

Rubinsky Roofing LLC

The Texas Attorney General obtained a judgment holding Rubinsky Roofing LLC liable for 27 violations of the Texas Deceptive Trade Practices Act, including deceptive practices involving older consumers and payment for unnecessary or unfinished repairs. The judgment requires more than $1.5 million in civil penalties, allocates at least $500,000 to consumer restitution, and permanently bars the company and its owner from the practices at issue.

High

$1.5M

NYSettlementMultistate

Ascend Laboratories and Mayne Pharma

New York and a coalition of 47 other attorneys general secured settlements with Ascend Laboratories and Mayne Pharma over an alleged scheme to inflate generic drug prices and reduce competition. Mayne agreed to pay $650,000 and Ascend $400,000, with settlement funds distributed to impacted consumers and the companies agreeing to internal antitrust reforms.

High

$1.1M

FTCSettlement

Premier Franchising Group LLC and Franchise Fastlane LLC

The FTC alleged that Premier Franchising Group LLC and Franchise Fastlane LLC made deceptive and unsubstantiated claims about the Premier Martial Arts franchise opportunity and violated the Franchise Rule. The proposed settlements require the companies to pay a combined $1.85 million to compensate franchisees, prohibit certain misrepresentations, and require Franchise Rule compliance; certain franchisees may also cancel their agreements without penalty.

High

$1.9M

TXSettlement

Tris Pharmaceuticals

Texas Attorney General Ken Paxton announced a $7.5 million settlement with Tris Pharmaceuticals over alleged misrepresentations about the efficacy of Dyanavel XR, an ADHD drug marketed for children. The release says the company overstated the drug’s efficacy and directed sales representatives to make misleading claims to doctors, including Medicaid providers.

High

$7.5M

NYEnforcement Action

Evolutions Festival LLC and 845 Vibrations LLC

New York Attorney General Letitia James sued Evolutions Festival LLC and 845 Vibrations LLC over the cancellation of the 2025 festival and their failure to refund ticket holders and vendors. The state alleges violations of laws governing advance ticket-sale funds and seeks restitution, civil penalties of $5,000 for each of 1,185 alleged violations, and an order requiring a $500,000 bond before the organizers can hold future cultural events in New York.

High

$5.9M

NYSettlementMultistate

Laboratory Corporation of America (Labcorp)

Labcorp agreed to pay $2,287,455 and make security and vendor-management reforms following a 2019 breach of its debt collector AMCA that potentially exposed personal information of more than 27.5 million people, including Labcorp patients’ sensitive medical information. The settlement requires stronger security and incident response practices, limits on vendor data sharing, enhanced vendor oversight, contractual cybersecurity requirements, and an independent security assessment.

HighData BreachSecurity FailureHealth Data

$2.3M

CTSettlementMultistate

Laboratory Corporation of America

Connecticut Attorney General William Tong led a 44-attorney-general coalition settlement with Laboratory Corporation of America over the 2019 AMCA breach, which potentially exposed personal information of more than 27.5 million people, including 10.2 million Labcorp patients. Labcorp will pay $2,287,455 and implement enhanced vendor-risk management, information-security, and oversight measures.

HighData BreachSecurity FailureHealth Data

$2.3M

NYSettlementMultistate

Laboratory Corporation of America

New York and a bipartisan coalition of 43 other attorneys general reached an agreement with Laboratory Corporation of America (Labcorp) following a 2019 breach at its debt-collection vendor, AMCA, that potentially exposed personal information of more than 27.5 million people. Labcorp will pay $2,287,455 to the states and implement extensive security and vendor-risk reforms.

HighData BreachSecurity FailureHealth Data

$2.3M

NJSettlementMultistate

Laboratory Corporation of America Holdings (LabCorp)

Laboratory Corporation of America Holdings agreed to pay $2,287,455 to participating states and strengthen its security and vendor-management practices following an investigation into the 2019 breach at its debt-collection vendor, AMCA. The breach potentially exposed information of more than 27.5 million people nationwide, including sensitive information belonging to approximately 10.2 million LabCorp patients.

HighData BreachSecurity FailureHealth Data

$2.3M

COSettlementMultistate

Laboratory Corporation of America

Colorado and a bipartisan coalition of attorneys general reached a $2,287,455 settlement with Laboratory Corporation of America over the 2019 data breach at its debt collector, American Medical Collection Agency. The settlement requires stronger vendor risk management and information security practices, with particular requirements for medical debt collectors.

HighData BreachSecurity Failure

$2.3M

TXEnforcement Action

TikTok

A Texas state district court (Judge Cory Liu) has found TikTok liable for lying to parents about the safety of its platform and for exposing children to inappropriate and explicit content, making Texas the first state in the nation to hold TikTok liable on these claims. The court found that although TikTok claimed it would remove graphic videos depicting drugs, nudity, alcohol, injuries, and profanity, such videos remained accessible to minors, even under 'Restricted Mode.' No penalty has been imposed yet; Attorney General Paxton will proceed to trial, expected next month, where relief and penalties will be determined.

HighChildren's DataNotice Failure
NYSettlement

VGW Holdings Pty. Ltd.

New York Attorney General Letitia James secured an $8 million settlement from VGW Holdings Pty. Ltd. and its affiliates for unlawfully operating online sweepstakes casinos — Chumba Casino, Global Poker, and Luckyland Slots — that allowed New Yorkers to play casino games with virtual coins exchangeable for cash or prizes. The OAG's June 2025 cease and desist letter stopped the company from offering virtual coin gambling in New York, and Governor Hochul signed a formal ban on sweepstakes casinos into law in December 2025. Under the settlement, VGW will pay $8 million in disgorgement, penalties, and costs; note this is an illegal-gambling enforcement action rather than a privacy matter, so no privacy violation taxonomy categories apply.

High

$8.0M

FTCSettlement

Nuvei Corporation

The FTC charged Canada-based payment processor Nuvei Corporation and its subsidiaries with knowingly processing payments for fraudulent merchants, including more than $30 million in payments for the Reimage tech support scam from 2017 to 2023, as well as merchants making false earnings claims and impersonating government tax authorities. Under the stipulated order filed in the U.S. District Court for the District of Arizona, Nuvei will pay $4.85 million for consumer redress, is banned from serving tech support telemarketers, and must implement robust merchant screening and chargeback monitoring practices. Note: this is a payments-fraud facilitation action under the FTC Act and Telemarketing Sales Rule, not a data privacy violation.

High

$4.8M

TXEnforcement ActionMultistate

Amazon.com, Inc.

Texas Attorney General Ken Paxton sued Amazon.com, Inc. on August 31, 2026, alleging Amazon deceived advertisers by claiming to run second-price auctions while secretly applying hidden surcharges and undisclosed 'soft reserve' prices that pushed winners' costs up by roughly 17% on ordinary days and more than 25% during peak events like Prime Day. The hidden surcharges generated roughly $4.5 billion in additional nationwide revenue in 2024, and more than 18,000 Texas sellers and vendors advertise on the platform. The State brings claims under the Texas Deceptive Trade Practices Act, seeking civil penalties of up to $10,000 per violation, an injunction against inaccurate auction descriptions, and per-auction pricing records for every Texas advertiser; the FTC and a coalition of other states filed a parallel federal action the same day.

HighDark Patterns
NYSettlementMultistate

Cal-Maine Foods, Versova/Centrum, and Hickman's Egg Ranch

New York Attorney General Letitia James announced a multistate settlement with Cal-Maine Foods, Versova/Centrum, and Hickman's Egg Ranch for illegally coordinating to influence a daily price index for eggs, artificially inflating prices for retailers and consumers nationwide. The companies will deliver 53 million eggs to food banks across 17 participating states, pay a combined $3.3 million, and adopt compliance measures to prevent future violations.

HighSurveillance Pricing

$3.3M

VASettlementMultistate

Zillow Group, Inc. and Redfin Corporation

Attorney General Jones, along with four other states and the FTC, sued Zillow and Redfin for an illegal agreement where Zillow paid Redfin $100 million to exit the multifamily rental advertising market and exclusively display Zillow's listings. The settlement requires the companies to restore competition, pay $2 million, and prohibits future anticompetitive agreements.

HighUnauthorized Data Sharing

$2.0M

NYSettlementMultistate

Zillow Group, Inc.

New York Attorney General Letitia James, along with four other states and the FTC, settled with Zillow and Redfin after they entered an illegal agreement to stop competing in the multifamily rental advertising market. Zillow paid Redfin $100 million to shut down its advertising business and exclusively display Zillow's listings. The settlement requires the companies to resume competing and pay $2 million.

HighUnauthorized Data Sharing

$2.0M

Explore Enforcement Data