1,788 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.
1,788
Total Actions
16
Jurisdictions
$51.8B+
Total Fines Tracked
The FTC amended its lawsuit against telehealth provider Hims and Hers, adding Arizona, Florida, Nebraska, Ohio, and Wisconsin as co-plaintiffs. The complaint alleges that the company shared consumers’ sensitive health information with advertising platforms despite privacy claims, and misled consumers about prescription charges and subscription cancellation; the case remains for the court to decide.
The New York Attorney General issued guidance explaining Shield Law protections for reproductive and gender-affirming health care information and the steps required before responding to covered information requests. This is guidance, not an enforcement action against a named company; it describes potential penalties for improper disclosure or failure to follow required procedures.
General Motors agreed to a $220 million settlement with a coalition of 36 attorneys general over allegations that it sold consumers’ driver behavior and location data to third parties, including data brokers that resold it to insurers. The settlement reportedly requires consumer consent before collecting or disclosing driving and location data, and Virginia is to receive about $6.5 million.
$220.0M
A bipartisan coalition of 36 attorneys general settled allegations that General Motors collected and sold drivers’ driving-behavior and location data to data brokers, whose customers included insurance companies. GM will pay $220 million nationally, with Minnesota receiving $7,095,664, and must obtain affirmative express consent before collecting or disclosing driving and location data.
$7.1M
General Motors agreed to a nationwide $220 million settlement over allegations that it sold drivers’ identifiable driving behavior and location data to data brokers, which then sold it to insurers. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.
$220.0M
Connecticut and a coalition of 36 attorneys general reached a $220 million settlement with General Motors over the collection and sale of consumers’ driving behavior and location data to data brokers and insurers without adequate disclosure or consent. The settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy program assessments and dealership oversight and training.
$220.0M
A 36-attorney-general coalition resolved allegations that General Motors collected and sold identifiable driver behavior and location data to data brokers, which supplied it to insurers for use in assessing drivers and potentially raising premiums. The $220 million nationwide settlement requires affirmative express consent before collecting or disclosing driving and location data, limits data collection, and imposes privacy-program assessments and dealership oversight and training.
$220.0M
New York Attorney General Letitia James and a bipartisan coalition secured a $220 million settlement from General Motors LLC for selling drivers’ personal driving and location data to data brokers without adequate disclosure or consent. GM must limit the driving data it collects and implement privacy assessments and dealership oversight and training.
$220.0M
Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.
$3.0M
New York Attorney General Letitia James and a bipartisan coalition of 39 other attorneys general filed a motion in Character Technologies, Inc.’s bankruptcy, citing risks to children and sensitive user information and potential violations of state privacy laws. The coalition asks the court, the company, and any prospective buyer to require meaningful privacy and safety protections; no fine or final remedy is reported.
A court denied RealPage’s attempt to have Connecticut’s antitrust case dismissed, allowing the lawsuit to continue. The complaint alleges that RealPage used landlords’ nonpublic, competitively sensitive rental data in an algorithm to recommend prices and that its practices inflated rents; no penalty or final remedy against RealPage is reported.
An Oregon judge rejected RealPage’s attempt to have the state’s rent-pricing lawsuit dismissed, allowing the case to move forward. Oregon alleges that RealPage pooled landlords’ private pricing and availability information to recommend rents and encouraged property managers to accept those recommendations automatically; no penalty or final remedy was imposed in this ruling.
New York Attorney General Letitia James settled with Brooklyn High Rise LLC for illegally denying housing to prospective tenants based on housing court records, a practice known as tenant blacklisting. The company also charged non-refundable 'good faith' deposits. Brooklyn High Rise will pay $352,250 in penalties and restitution and must end its unlawful tenant screening practices.
$352K
Attorney General Jay Jones and a coalition of 24 attorneys general obtained a preliminary injunction blocking the Trump administration from demanding a database of state-owned records containing personal information of 17 million CDL drivers from AAMVA and from terminating over $10 million in federal funding. The lawsuits allege DOT, FMCSA, and DHS violated federal privacy laws by secretly creating a database with no guardrails on use or sharing of Social Security numbers and no public notice.
Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofits about a surge of demand letters alleging California Invasion of Privacy Act (CIPA) violations based on common website technologies such as cookies, pixels, and analytics tools. The AG cautions that some letters may exaggerate or misrepresent violations and may be fraudulent, noting serial CIPA plaintiff Vivek Shah has been declared a vexatious litigant. Recipients are advised not to pay or respond directly, to consult privacy counsel, and to report suspected fraud to the Consumer Protection Division.
Colorado Attorney General Phil Weiser announced a settlement with Avail Property Management Inc. and PK Management, LLC resolving allegations that the companies denied prospective tenants housing based on criminal history information prohibited under Colorado's Rental Application Fairness Act, including arrests, deferred judgments, and convictions older than five years (some more than 20 years old). The companies, which managed nearly 4,000 rental units across Colorado, relied on a third-party background screening service despite legal prohibitions. Under the settlement, they must change screening practices, review vendor recommendations rather than relying on them automatically, submit to two years of compliance reporting, and pay $300,000.
$300K
Virginia Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta joined by 52 states and U.S. territories, resolving claims that Meta deceived the public about addictive design features harming youth mental health and shared Facebook users' private information with third parties before the 2016 election. Virginia is guaranteed $353 million (with an additional $11 million for the data-sharing claims, bringing its total to $364 million). Meta must implement sweeping child-safety reforms on Instagram and Facebook, including age verification, daily time limits, and 'check in breaks,' with implementation and efficacy regularly assessed by an independent auditor.
$353.0M
Attorney General Jones, along with four other states and the FTC, sued Zillow and Redfin for an illegal agreement where Zillow paid Redfin $100 million to exit the multifamily rental advertising market and exclusively display Zillow's listings. The settlement requires the companies to restore competition, pay $2 million, and prohibits future anticompetitive agreements.
$2.0M
New York Attorney General Letitia James, along with four other states and the FTC, settled with Zillow and Redfin after they entered an illegal agreement to stop competing in the multifamily rental advertising market. Zillow paid Redfin $100 million to shut down its advertising business and exclusively display Zillow's listings. The settlement requires the companies to resume competing and pay $2 million.
$2.0M
Attorney General Tong and a coalition of four other states and the FTC sued Zillow and Redfin after Zillow paid Redfin $100 million to shut down its multifamily rental advertising business and transfer clients to Zillow. The settlement requires the companies to restore competition, with Redfin rebuilding its apartment advertising business, and pay $2 million to the coalition.
$2.0M
Attorney General Jay Jones and a coalition of 21 attorneys general obtained a temporary restraining order blocking the Trump administration from demanding a database of state-owned records containing sensitive personal information of 17 million commercial drivers from AAMVA. The lawsuits allege the federal agencies violated federal privacy laws and the Administrative Procedure Act by seeking to acquire the data without guardrails or public notice.
New York Attorney General Letitia James and a coalition of 22 attorneys general plus Pennsylvania secured a temporary restraining order blocking the Trump administration from seizing the names, dates of birth, and Social Security numbers of 17 million commercial drivers nationwide, including nearly 500,000 New Yorkers. The U.S. District Court for the Eastern District of Virginia granted the TRO, preventing the federal government from accessing the data or cutting off access to the critical database.
Connecticut Attorney General William Tong announced a $275,000 settlement with TaxAct, an online tax preparation company, over allegations that between January 2018 and December 2022, TaxAct improperly disclosed detailed customer financial information to Meta and Google through third-party tracking technologies without notifying taxpayers. The settlement requires TaxAct to pay $275,000 and implement new third-party tracking compliance measures, including a review committee, written policies, a tag monitoring system, and two independent third-party audits.
$275K
Attorney General Dan Rayfield and a coalition of 21 attorneys general and Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, and AAMVA to block demands for a database containing personal information of 17 million commercial drivers. The federal government threatened to withhold $10 million in funding unless the data was turned over, which the coalition argues violates privacy law.
A coalition of 21 attorneys general and the Governor of Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, DHS, and AAMVA to prevent the federal government from obtaining a database of personal information of 17 million commercial driver's license holders. The lawsuits allege the federal government violated federal privacy laws and the Administrative Procedure Act by demanding the data without notice or guardrails, and threatening to withhold $10 million in federal funding if AAMVA refused.
New York Attorney General Letitia James and a coalition of 21 other attorneys general and Pennsylvania sued the U.S. Department of Transportation and Department of Homeland Security to block the federal government from seizing the personal data of 17 million commercial drivers from the CDLIS database. The coalition argues the demands violate federal privacy laws and the Constitution, and seeks an injunction to prevent the data transfer.
Attorney General Phil Weiser joined a coalition of 22 attorneys general and Pennsylvania in filing two lawsuits against the Trump administration for demanding a database of state-owned records containing sensitive personal information of 17 million commercial drivers. The lawsuits allege violations of federal privacy laws and the Administrative Procedure Act, and seek an emergency order to prevent the data from being turned over by the August 17 deadline.
Attorney General Tong and a coalition of 21 attorneys general and Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, and DHS to block demands for the personal information of 17 million CDL drivers. The lawsuits allege violations of federal privacy laws and the Administrative Procedure Act, and seek an emergency order to prevent the data transfer.
A coalition of 21 state attorneys general and Pennsylvania filed lawsuits against the Trump Administration, DOT, FMCSA, DHS, and AAMVA to prevent the unlawful demand for a database containing personal information of 17 million commercial driver's license holders. The lawsuits allege violations of federal privacy laws and the Administrative Procedure Act, and seek an emergency order to block the data transfer.
New York Attorney General James announced a multistate settlement with three major egg producers for illegally coordinating to influence a daily egg price index, artificially inflating prices for consumers. The companies will deliver 53 million eggs to food banks and pay $3.3 million, along with adopting compliance measures.
$3.3M
All data sourced from official government enforcement pages.