1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.
1,634
Total Actions
16
Jurisdictions
$49.9B+
Total Fines Tracked
Connecticut Attorney General William Tong issued an advisory that newly enacted privacy laws take effect October 1, 2026, including Public Act 26-64 (SB4), which amends the Connecticut Data Privacy Act, and Public Act 26-15 (SB5), which established the Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act). The new laws regulate surveillance pricing, facial recognition technology, genetic data collected by direct-to-consumer testing companies, a ban on the sale of precise geolocation data, a data broker registry, AI use in employment decisions, and chatbots offered to children. No enforcement action was taken; this is prospective guidance alerting consumers and businesses to new rights and compliance requirements.
A Texas state district court (Judge Cory Liu) has found TikTok liable for lying to parents about the safety of its platform and for exposing children to inappropriate and explicit content, making Texas the first state in the nation to hold TikTok liable on these claims. The court found that although TikTok claimed it would remove graphic videos depicting drugs, nudity, alcohol, injuries, and profanity, such videos remained accessible to minors, even under 'Restricted Mode.' No penalty has been imposed yet; Attorney General Paxton will proceed to trial, expected next month, where relief and penalties will be determined.
Connecticut Attorney General William Tong announced a civil investigative demand into MediaLab.AI Inc., owner of the Kik Messenger app, over lax age assurance practices, content moderation, and child safety failures that advocates have dubbed a "predator's paradise." The action follows a July 2025 notice of violation under the Connecticut Data Privacy Act for privacy notice deficiencies and processing sensitive data — including health, biometric, and precise geolocation data — without proper consent, which the company has only partially addressed. The new investigation seeks records related to practices that may constitute unfair or deceptive acts or practices under the CTDPA and the Connecticut Unfair Trade Practices Act. No fine has been imposed to date.
Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta, with $353 million guaranteed for Virginia, resolving a child-safety lawsuit brought by a multistate coalition against the social media company. The settlement includes monetary relief and guardrails aimed at protecting children on Meta's platforms.
$353.0M
Virginia Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta joined by 52 states and U.S. territories, resolving claims that Meta deceived the public about addictive design features harming youth mental health and shared Facebook users' private information with third parties before the 2016 election. Virginia is guaranteed $353 million (with an additional $11 million for the data-sharing claims, bringing its total to $364 million). Meta must implement sweeping child-safety reforms on Instagram and Facebook, including age verification, daily time limits, and 'check in breaks,' with implementation and efficacy regularly assessed by an independent auditor.
$353.0M
Texas Attorney General Ken Paxton secured a historic settlement with Meta Platforms, Inc. requiring Meta to pay over $1 billion and implement significant new safeguards to protect children online. The settlement includes stricter age-assurance measures, a daily two-hour limit for teen users, default disabling of notifications during school hours, hidden likes/reactions, and a nighttime access mode restricting features for children.
$1.0B
Attorney General James and a bipartisan coalition of 50 other attorneys general secured a landmark settlement with Meta Platforms, Inc. (Meta) worth up to $17.1 billion to address the company's harmful and addictive features targeting minors on Facebook and Instagram. The settlement requires Meta to implement significant changes, including age verification, time limits for minors, restrictions on notifications, and options to opt out of algorithmic feeds, along with monetary payments to states for mental health and education programs.
$17.1B
A bipartisan coalition of 33 state attorneys general, led by Minnesota AG Keith Ellison, began trial against Meta Platforms, Inc., alleging the company knowingly designed and deployed harmful features on Facebook and Instagram that drive children and teens to use the platforms compulsively, while falsely assuring parents and the public that its platforms were safe for young users. The states also allege Meta illegally collected personal information from children under 13 without parental consent, violating COPPA. The trial opened before Judge Yvonne Gonzalez Rogers in the U.S. District Court for the Northern District of California, with the states seeking monetary penalties and injunctive relief.
A bipartisan coalition of state attorneys general led by New Jersey, California, Colorado, and Kentucky is taking Meta Platforms, Inc. to trial, alleging that Meta designed addictive features on Instagram and Facebook that harm minors' mental health, illegally collected data from children under 13 without the required protections under COPPA, and misled users about platform safety. Opening arguments begin August 18, 2026, in the U.S. District Court for the Northern District of California. No monetary penalty or final remedy has yet been imposed.
New York Attorney General Letitia James issued a statement marking the first day of trial in a multistate lawsuit against Meta, alleging the company knowingly designed addictive features on Facebook and Instagram that harm children's mental health. The coalition alleges Meta illegally collected personal information from children under 13 without parental consent, violating COPPA, and seeks monetary penalties, restitution, and an injunction against deceptive practices.
The Minnesota court denied X.AI's request for a temporary restraining order that would have halted enforcement of Minnesota's first-in-the-nation AI nudification ban (HF 1606). The law bans technology that generates fake nude images of real people, and Attorney General Ellison argued that X.AI's delay in filing the motion showed no immediate harm. The court agreed, allowing the law to take effect as planned.
New York Attorney General Letitia James released final rules implementing the SAFE for Kids Act, which requires social media companies to restrict algorithmically personalized feeds and nighttime notifications for users under 18 unless they obtain parental consent. The rules establish age assurance standards, parental consent procedures, and data minimization requirements, with civil penalties of up to $5,000 per violation for noncompliance.
The Minnesota Attorney General filed a lawsuit against Maduro Distributors, Inc. (doing business as Loon) for illegally manufacturing, distributing, and selling flavored vapes that appeal to minors, using flavors like 'Cotton Candy' and 'Blue Razz Slushy' and kid-friendly characters. The lawsuit also alleges Loon deceptively marketed its products as accepted for FDA approval when they were not. The state seeks a permanent injunction, civil penalties up to $25,000 per violation, restitution, and attorney fees.
Virginia Attorney General Jay Jones announced a court ruling denying Meta Platforms, Inc.'s motion for summary judgment in a lawsuit alleging Meta designed Facebook and Instagram to addict children and misled parents. The court allowed claims under COPPA and the Virginia Consumer Protection Act to proceed to trial, scheduled for August 2026.
The Virginia Attorney General, as part of a multistate coalition, secured a court ruling allowing their case against Meta to proceed to trial. The case alleges that Meta designed and deployed harmful features on its platforms that addict children and teens, causing severe mental and physical detriment. The trial is scheduled for August.
The FTC, along with Alaska, Iowa, Nebraska, and Texas, filed a lawsuit against WPATH alleging the organization made false and unsubstantiated claims about the necessity, safety, and effectiveness of pediatric medical transition services. The complaint alleges WPATH misled parents and children about medical consensus and failed to disclose serious side effects, in violation of the FTC Act.
The FTC finalized a consent order against Illuminate Education Inc. for failing to secure students' personal data, leading to a breach affecting 10.1 million students. The order requires Illuminate to implement a data security program, delete unnecessary data, and limit data collection, but imposes no monetary penalty.
The FTC sued Amare Global Holdings Inc. and its principals for falsely claiming that dietary supplements like Kids Happy Juice and Kids Mood+ could treat or cure depression, anxiety, and ADHD in children and adults. The FTC also alleged the company misled recruits about their potential earnings as 'brand partners' in its multilevel marketing scheme.
A bipartisan coalition of state attorneys general began trial against Meta Platforms, Inc., alleging the company knowingly designed addictive features on Facebook and Instagram that harm children and teens, deceived parents about platform safety, and illegally collected personal information from children under 13 without parental consent in violation of COPPA. The states seek monetary penalties, an injunction to stop unlawful practices, and other relief. The trial is being litigated in the U.S. District Court for the Northern District of California.
Attorney General Phil Weiser joined a bipartisan coalition of 43 attorneys general opposing the federal Kids Internet and Digital Safety Act (KIDS Act), arguing it would preempt state laws protecting children online and insulate Big Tech. The coalition supports the Senate version (KOSA) which includes a duty of care requirement and preserves state enforcement authority.
The FTC began enforcing the TAKE IT DOWN Act on May 19, 2026, a law requiring covered platforms to establish a process for victims to request removal of nonconsensual intimate images and delete such content within 48 hours of a valid request. The agency launched a consumer complaint portal, issued compliance guidance for businesses and consumers, and sent reminder letters to major platforms including Meta, TikTok, and X about their obligations under the law. No specific penalties or enforcement actions against individual companies were announced in this release.
Connecticut Attorney General William Tong praised final passage of House Bill 5312, which creates new civil enforcement mechanisms for deepfake digital sexual assault. The legislation allows the AG to pursue civil injunctions and penalties against platforms that disseminate illegal synthetic intimate images, including AI-generated child pornography, and establishes a private right of action for victims. The bill builds on prior Connecticut laws criminalizing unauthorized dissemination of intimate images.
Connecticut’s legislature passed House Bill 5312, creating new civil enforcement mechanisms for deepfake digital sexual assault, including unauthorized dissemination of synthetically created intimate images and AI-generated child pornography. The bill establishes a private right of action for victims and empowers the Connecticut Attorney General to pursue civil injunctions and penalties against abusers and platforms hosting illegal content. This builds on prior Connecticut laws criminalizing unauthorized intimate image dissemination.
Connecticut Attorney General William Tong issued a statement on May 1, 2026, following final passage of bipartisan legislation to combat youth social media addiction and regulate artificial intelligence harms. The legislation imposes new requirements on social media companies regarding minor users, including parental consent for addictive algorithms, default privacy settings, and annual reporting obligations. It also establishes rules for AI chat bots and automated employment decision tools, including disclosure requirements and self-harm detection protocols.
Connecticut Attorney General William Tong issued a statement on May 1, 2026, announcing the final passage of bipartisan legislation targeting youth social media addiction and artificial intelligence harms. The legislation imposes new obligations on social media companies regarding minor account settings, parental consent, and reporting, as well as requirements for AI chatbot operators and employers using automated decision tools. The statement also references ongoing enforcement actions against Meta and TikTok for allegedly designing addictive platform features for youth.
Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.
Connecticut Attorney General William Tong announced a settlement with beauty retailer Sephora resolving an investigation into the company’s marketing of anti-aging skincare products containing active ingredients like retinol to children under 13. Sephora agreed to adopt enforceable safeguards including requiring suppliers to provide age suitability warnings, disclosing those warnings on product pages, training employees to advise young customers, and maintaining a public resource on age-appropriate products. No monetary penalty was imposed.
Florida Attorney General James Uthmeier opened a civil investigation into Discord and issued a subpoena demanding documents related to its marketing to children, age-verification processes, content moderation, parental controls, and reporting of child exploitative activity. The investigation alleges potential violations of Florida’s Deceptive and Unfair Trade Practices Act, citing the platform’s widespread use by child predators to target minors. Discord must produce records on its child safety practices, minor user data, and complaint handling related to child exploitation.
A former employee of the New Jersey Department of Children and Families was indicted for allegedly leaking confidential child protection case information in exchange for bribes. The defendant, Susaida Nazario, misused her access to provide case details to an unauthorized individual, compromising sensitive children's data.
The California Privacy Protection Agency settled with PlayOn Sports for $1.10 million over CCPA violations, including failing to provide adequate opt-out mechanisms and improperly tracking users, particularly students. The company must implement proper opt-out methods, improve disclosures, and comply with children's data consent requirements.
$1.1M
All data sourced from official government enforcement pages.