Privacy and consumer protection enforcement actions tracked from official Virginia Attorney General sources.
Official enforcement page30
Total Actions
$1.1B
Total Fines
Virginia Attorney General Jay Jones joined a coalition of 21 attorneys general in opposing a DHS rule that allows certain affirmative asylum applications to be referred to immigration court without an asylum officer interview. The coalition argues the rule violates federal law, harms asylum applicants, and bypasses notice-and-comment requirements; the release describes a comment letter, not a privacy enforcement action or monetary penalty.
Virginia Attorney General Jay Jones joined 22 attorneys general in a comment letter opposing a proposed USCIS rule that would impose a $103,265 tax on certain H-1B petitions. The coalition urged USCIS to withdraw the proposal, arguing it exceeds the agency’s authority, harms state staffing, and violates rulemaking requirements.
A federal judge permanently blocked the Trump administration from penalizing states over SNAP administration and struck down guidance restricting food assistance for certain lawful permanent residents. The release does not state the date of the court’s ruling, so the event date uses the publication date as a proxy.
Attorney General Jay Jones joined a coalition of 24 attorneys general in filing a comment letter opposing a proposed CMS rule that the coalition says oversteps federal law, could put Medicaid funding at risk, and interfere with state regulation of health insurance. The coalition urges CMS to withdraw or significantly revise the proposed rule.
Attorney General Jay Jones and a coalition of 24 attorneys general obtained a preliminary injunction blocking the Trump administration from demanding a database of state-owned records containing personal information of 17 million CDL drivers from AAMVA and from terminating over $10 million in federal funding. The lawsuits allege DOT, FMCSA, and DHS violated federal privacy laws by secretly creating a database with no guardrails on use or sharing of Social Security numbers and no public notice.
Virginia and 40 other state attorneys general settled with subprime auto lender Credit Acceptance Corporation (CAC) for $694 million in cash restitution and debt relief. The settlement resolves allegations that CAC originated loans it knew or should have known consumers could not afford, and that it encouraged and failed to prevent dealers from unlawfully 'packing' auto-loan contracts with unwanted Vehicle Service Contracts and GAP products. The Consent Judgment was filed September 17, 2026, with the City of Richmond Circuit Court.
$694.0M
Virginia Attorney General Jay Jones announced that Governor Spanberger's declaration of a state of emergency due to prolonged, severe drought has triggered Virginia's anti-price gouging statutes, making it unlawful to charge unconscionable prices for necessary goods and services. A price is unconscionable if it grossly exceeds the price charged during the ten days immediately prior to the emergency. No entity was charged or fined; the release is a consumer advisory explaining how to report suspected price gouging to the Attorney General's Consumer Protection Section.
Virginia Attorney General Jay Jones, joined by a bipartisan coalition of 48 other attorneys general, sent a letter urging the FCC to strengthen its 'Know Your Upstream Provider' (KYUP) rules to keep illegal robocalls off the U.S. phone network. The coalition asks the FCC to mandate baseline vetting measures for upstream providers, add monitoring triggers, strengthen STIR/SHAKEN caller ID authentication, establish base penalties, and require retention of KYUP data. No company was fined in this action; it is regulatory advocacy that builds on the Anti-Robocall Multistate Litigation Task Force's Operation Robocall Roundup, which sent warning letters to 37 voice providers.
Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta, with $353 million guaranteed for Virginia, resolving a child-safety lawsuit brought by a multistate coalition against the social media company. The settlement includes monetary relief and guardrails aimed at protecting children on Meta's platforms.
$353.0M
Virginia Attorney General Jay Jones announced a landmark $17 billion multistate settlement with Meta joined by 52 states and U.S. territories, resolving claims that Meta deceived the public about addictive design features harming youth mental health and shared Facebook users' private information with third parties before the 2016 election. Virginia is guaranteed $353 million (with an additional $11 million for the data-sharing claims, bringing its total to $364 million). Meta must implement sweeping child-safety reforms on Instagram and Facebook, including age verification, daily time limits, and 'check in breaks,' with implementation and efficacy regularly assessed by an independent auditor.
$353.0M
Attorney General Jones, along with four other states and the FTC, sued Zillow and Redfin for an illegal agreement where Zillow paid Redfin $100 million to exit the multifamily rental advertising market and exclusively display Zillow's listings. The settlement requires the companies to restore competition, pay $2 million, and prohibits future anticompetitive agreements.
$2.0M
Attorney General Jay Jones and a coalition of 21 attorneys general obtained a temporary restraining order blocking the Trump administration from demanding a database of state-owned records containing sensitive personal information of 17 million commercial drivers from AAMVA. The lawsuits allege the federal agencies violated federal privacy laws and the Administrative Procedure Act by seeking to acquire the data without guardrails or public notice.
A coalition of 21 attorneys general and the Governor of Pennsylvania filed lawsuits against the U.S. Department of Transportation, FMCSA, DHS, and AAMVA to prevent the federal government from obtaining a database of personal information of 17 million commercial driver's license holders. The lawsuits allege the federal government violated federal privacy laws and the Administrative Procedure Act by demanding the data without notice or guardrails, and threatening to withhold $10 million in federal funding if AAMVA refused.
Attorney General Jay Jones announced the creation of the Regulated Products Enforcement Unit to centralize civil enforcement for liquid nicotine products, THC and hemp-derived products, kratom, and related intoxicants. The unit will oversee compliance, directory administration, and public education. It will coordinate with Virginia ABC and other agencies to take legal action against violators.
Attorney General Jay Jones joined a coalition of 26 states to sue the Trump administration over unlawful conditions attached to counterterrorism and emergency funding. The conditions would require states to share voter data with DHS and assist in immigration enforcement, which the coalition argues violates the Administrative Procedure Act and the Spending Clause.
Virginia Attorney General Jay Jones joined a coalition of 42 state attorneys general in a multistate settlement with 23andMe over a 2023 data breach that exposed the genetic data of approximately 6.9 million customers. The settlement requires 23andMe to pay $18 million to the states and $46.75 million to affected consumers, resolving allegations of inadequate security practices and delayed breach notification.
$18.0M
Virginia Attorney General Jay Jones joined a bipartisan coalition of 13 attorneys general alleging that Nexstar and Tegna are violating a court's hold-separate order by allowing Nexstar personnel to remain on Tegna's Board of Directors during the merger litigation. The coalition seeks clarification of the order to ensure the companies operate independently while the antitrust case proceeds.
Attorney General Jay Jones joined 42 attorneys general in a multistate settlement with 23andMe's bankruptcy trustee over a 2023 data breach that compromised genetic data of nearly 7 million customers. The settlement includes $150 million in allowed claims, with immediate recovery of $18 million from bankruptcy funds, of which Virginia receives $662,649. The settlement also requires enhanced data security measures and consumer protections for the new entity, 23andMe Research Institute.
$663K
Virginia Attorney General Jay Jones announced a court ruling denying Meta Platforms, Inc.'s motion for summary judgment in a lawsuit alleging Meta designed Facebook and Instagram to addict children and misled parents. The court allowed claims under COPPA and the Virginia Consumer Protection Act to proceed to trial, scheduled for August 2026.
Block, Inc., the parent company of Cash App, agreed to a $45 million multistate settlement with 46 states for misleading consumers about the safety of Cash App and failing to protect users from fraud. The settlement requires Block to improve customer support, stop deceptive marketing, and fulfill legal obligations to investigate fraud and reimburse unauthorized transactions.
$45.0M
The Virginia Attorney General, as part of a multistate coalition, secured a court ruling allowing their case against Meta to proceed to trial. The case alleges that Meta designed and deployed harmful features on its platforms that addict children and teens, causing severe mental and physical detriment. The trial is scheduled for August.
Virginia Attorney General Jay Jones announced the enforcement of several new laws effective July 1, 2026, including SB388 which prohibits the sale of Virginians' precise geolocation information. The law will be enforced through the Virginia Consumer Data Protection Act (VCDPA). This is a legislative announcement, not a specific enforcement action against a company.
The press release is a weekly roundup of Virginia Attorney General Jay Jones' activities, including updates on vape legislation, joining a 22-state coalition opposing a USPS firearm mailing proposal, filing emergency appeals to the U.S. Supreme Court regarding redistricting, commencement speeches, and Law Day events. No privacy-related enforcement actions are documented.
A coalition of 24 states led by Virginia Attorney General Jay Jones won a lawsuit against the Trump Administration, invalidating illegal tariffs imposed under Section 122 of the Trade Act of 1974. The U.S. Court of International Trade ruled the tariffs were unauthorized by law, as a trade deficit does not constitute the required 'large and serious balance-of-payment deficits' under the statute. The ruling prevents the administration from enforcing the 10% worldwide tariffs on most products.
Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.
Virginia Attorney General Jay Jones joined a bipartisan coalition of 44 state attorneys general in submitting a comment letter supporting a proposed U.S. Department of Labor rule to increase transparency requirements for pharmacy benefit managers (PBMs) servicing employer-funded ERISA health plans. The coalition urged the DOL to clarify that the proposed rule does not preempt existing state PBM transparency laws and to coordinate enforcement with state attorneys general. This action is a policy advocacy comment letter and does not constitute an enforcement action against any specific entity.
Virginia Attorney General Jay Jones, leading a coalition of 33 other states, secured a jury verdict finding Live Nation and Ticketmaster liable for violating federal and state antitrust laws via anticompetitive conduct including monopolization of event ticketing services and large concert amphitheaters. The jury determined the companies suppressed competition, overcharged consumers, and forced artists to use their promotion services. Remedies and financial penalties will be determined at a subsequent bench trial.
The Virginia Attorney General issued a consumer warning about predatory practices by tax debt settlement companies, referencing a past successful enforcement action against Wall & Associates, Inc. and CEO P. Mark Yates for violating the Virginia Consumer Protection Act. The Fauquier County Circuit Court ordered the company and CEO to pay over $1.6 million in civil penalties, with additional restitution to consumers pending determination.
$1.7M
Virginia Attorney General Jay Jones announced intent to enforce new provisions of the Virginia Consumer Data Protection Act that limit minors' social media usage to one hour per day without parental consent. The law, effective January 1, 2026, requires age verification and verifiable parental consent to change time limits, with potential penalties up to $7,500 per violation and injunctive relief. This follows a motion to dismiss a lawsuit by NetChoice challenging the law.
This press release announces Virginia's receipt of nearly $110 million from major tobacco companies under the 1998 Tobacco Master Settlement Agreement, a settlement resolving lawsuits against tobacco companies for deceptive marketing and consumer protection violations. The funds will support public health programs including the Virginia Healthcare Fund and Virginia Foundation for Healthy Youth. This document does not describe a privacy-related enforcement action.