Court Rules

Privacy Enforcement Tracker

1,672 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,672

Total Actions

16

Jurisdictions

$50.5B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
FTCGuidance

N/A (workshop announcement, not enforcement)

This is a press release announcing a workshop co-hosted by the FTC and the Institute for Consumer Financial Choice (ICFC) on May 14-15, 2026, focusing on developments in the financial services marketplace. No enforcement action, fine, or violation is involved.

Low
CTSettlement

Made-in-China

Connecticut Attorney General William Tong announced a settlement with international trade platform Made-in-China to cease all U.S. sales of unlawful 'research grade' GLP-1 weight loss drugs following an investigation into direct sales to consumers without prescriptions or medical oversight. The settlement prohibits the platform from hosting GLP-1 sales to U.S. customers, requires a monitoring system to remove non-compliant listings, and imposes a $300,000 penalty suspended after an initial $30,000 payment. Additional settlements were announced with Radiance Medspa and Advanced Medical Weight Loss over compounded non-FDA approved GLP-1 drugs.

Medium

$300K

TXInvestigation

Drone Nerds, LLC

Texas Attorney General Ken Paxton initiated an investigation into Drone Nerds, LLC over its partnership with CCP-affiliated Anzu Robotics, which markets drones with concealed surveillance capabilities and unauthorized data collection risks. Drone Nerds is accused of deceiving Texas consumers by misrepresenting Anzu’s ties to China and falsely claiming the drones are U.S.-based with secure privacy practices. The investigation is being conducted under the Texas Deceptive Trade Practices Act, with a Civil Investigative Demand issued to gather evidence of consumer deception and privacy violations.

LowSecurity FailureUnauthorized Data Sharing
FTCSettlement

Kochava, Inc. and Collective Data Solutions (CDS)

The FTC settled charges with data broker Kochava, Inc. and its subsidiary Collective Data Solutions (CDS) over allegations that they sold precise location data from hundreds of millions of mobile devices without consumer consent, enabling tracking of visits to sensitive locations like reproductive health clinics and places of worship. The settlement prohibits the companies from selling or sharing sensitive location data without affirmative express consumer consent, and imposes compliance requirements including a sensitive location data program, supplier consent assessments, incident reporting, and data retention schedules. No monetary penalty was imposed.

LowConsent FailureGeolocation DataUnauthorized Data Sharing
TXSettlementMultistate

Purdue Pharma, Inc. and the Sackler Family

Texas Attorney General Ken Paxton announced the effective date of a $7.4 billion settlement with Purdue Pharma, Inc. and the Sackler family over their role in fueling the opioid crisis. Texas will receive $286.5 million from the settlement, bringing the state’s total opioid recovery funds to over $3 billion. The settlement includes permanent bans on Sackler opioid sales in the U.S., public release of 30 million company documents, and distribution of funds for addiction treatment and prevention over 15 years.

Critical

$7.4B

NYCoalitionMultistate

N/A

This press release announces New York Attorney General Letitia James leading a coalition of 21 state attorneys general, the District of Columbia, and Pennsylvania’s Governor in filing an amicus brief with the U.S. Supreme Court to stay a Fifth Circuit ruling that would reinstate in-person dispensing requirements for mifepristone, a medication used for abortion. The coalition argues the ruling is scientifically unsupported, would restrict telehealth access to reproductive care, and undermines state sovereignty over abortion policy post-Dobbs. This is not a privacy-related enforcement action, as the content addresses reproductive health policy rather than data privacy violations.

Low
CTNew Law

social media companies

Connecticut Attorney General William Tong issued a statement on May 1, 2026, announcing the final passage of bipartisan legislation targeting youth social media addiction and artificial intelligence harms. The legislation imposes new obligations on social media companies regarding minor account settings, parental consent, and reporting, as well as requirements for AI chatbot operators and employers using automated decision tools. The statement also references ongoing enforcement actions against Meta and TikTok for allegedly designing addictive platform features for youth.

LowChildren's DataAI/Automated DecisionsConsent Failure
CTNew Law

Office of the Attorney General William Tong

Connecticut Attorney General William Tong issued a statement on May 1, 2026, following final passage of bipartisan legislation to combat youth social media addiction and regulate artificial intelligence harms. The legislation imposes new requirements on social media companies regarding minor users, including parental consent for addictive algorithms, default privacy settings, and annual reporting obligations. It also establishes rules for AI chat bots and automated employment decision tools, including disclosure requirements and self-harm detection protocols.

LowChildren's DataAI/Automated Decisions
CTSettlementMultistate

Purdue Pharma

Connecticut Attorney General William Tong announced that Purdue Pharma will dissolve as the company’s bankruptcy concludes and a $7.4 billion settlement with Purdue and the Sackler family takes effect. The settlement permanently bars the Sacklers from selling opioids in the U.S., directs funds to addiction treatment and prevention, and requires the release of over 30 million documents related to Purdue’s opioid business. Connecticut is expected to receive $64 million from the settlement, with first payments anticipated in fall 2026.

Critical

$7.4B

CAGuidance

California Privacy Protection Agency

The California Privacy Protection Agency Board voted to support two bills (AB 1542 and SB 1106) and took a 'support if amended' position on a third bill (AB 883). These bills aim to strengthen privacy protections by expanding sensitive data protections, improving deletion rights under the Delete Act, and providing expedited deletion for elected officials and judges.

Low
CPPASettlement

General Motors

CalPrivacy and the California Attorney General secured a $12.75 million settlement from General Motors for data sharing practices from connected vehicles. The settlement includes injunctive terms to change business practices.

CriticalUnauthorized Data Sharing

$12.8M

NJAdministrative OrderMultistate

Titan Macro Finance

The New Jersey Bureau of Securities issued a Cease and Desist Order on April 30, 2026, against Titan Macro Finance for operating an investment fraud scheme via WhatsApp and Instagram that defrauded at least one New Jersey investor of $64,000. The scheme involved unregistered broker-dealer activity, fake trading profits, and undisclosed fees to access investor funds. The action was coordinated with the California Department of Financial Protection and Innovation, which issued a similar order against the entity for violating California’s Commodity Code.

Low
NYSettlement

Uphold HQ, Inc.

New York Attorney General Letitia James secured a $5 million settlement from cryptocurrency platform Uphold HQ, Inc. for promoting Cred’s fraudulent CredEarn investment product as safe and reliable, when Cred was making risky loans to uncreditworthy borrowers in China. Uphold also falsely claimed Cred had comprehensive insurance and promoted the product without registering as a broker or commodity broker-dealer under New York law. As part of the settlement, Uphold will pay $5 million to harmed investors, remit $545,189 from Cred’s bankruptcy to customers, improve due diligence policies for third-party products, and register as a broker with the OAG.

High

$5.0M

CTRegulatory Report

Eversource

Connecticut Attorney General William Tong filed a brief on April 29, 2026, urging the Public Utilities Regulatory Authority (PURA) to reject Eversource’s request for $340 million in interest payments on nearly $1 billion in unvetted storm costs from 2018 to 2023. This press release does not describe a privacy-related enforcement action, as no data privacy violations are alleged, and no final enforcement action has been taken against Eversource. The matter involves utility cost recovery and regulatory advocacy, not privacy compliance.

Low
NYCoalitionMultistate

American Express, Capital One, Citi Group, Mastercard, Visa, PayPal, Stripe, Sezzle, Block (operator of Square, Cash App, and Afterpay)

New York Attorney General Letitia James led a bipartisan coalition of 24 state attorneys general, Puerto Rico, and New York City in sending letters to nine major credit card companies and payment processors urging them to block transactions facilitating illegal vaping product sales. The coalition cites federal and state laws prohibiting unauthorized e-cigarette sales, particularly to youth, and requests collaboration to prevent payment networks from processing such transactions. No enforcement penalties or actions were imposed as part of this initiative.

Low
CTCoalitionMultistate

Bipartisan Coalition of 25 State Attorneys General and City of New York

On April 28, 2026, Connecticut Attorney General William Tong joined a bipartisan coalition of 24 other state attorneys general and New York City in sending letters to major credit card companies and payment processors urging them to block transactions facilitating illegal vaping product sales. The coalition highlighted that most vapor products lack required FDA authorization and many online sellers violate the federal Prevent All Cigarette Trafficking (PACT) Act, including failing to implement youth access safeguards. The coalition requested a meeting to discuss prohibiting noncompliant merchants from using payment networks, building on existing state enforcement actions against illegal vape sellers.

Low
NYSettlementMultistate

Purdue Pharma

New York Attorney General Letitia James announced the shutdown of opioid manufacturer Purdue Pharma as part of a $7.4 billion settlement with a bipartisan coalition of 54 other state attorneys general. The Sackler family, former owners of Purdue, are permanently barred from selling opioids in the U.S. and have no involvement in Knoa Pharma, the new public benefit corporation replacing Purdue. Purdue was sentenced on criminal charges related to its role in the opioid crisis on April 28, 2026, with the new entity operating under strict oversight and excess revenue funding opioid abatement efforts.

Critical

$7.4B

NYEnforcement Action

Miles Burton Marshall

New York Attorney General Letitia James announced the conviction of tax preparer and insurance agent Miles Burton Marshall for operating a decades-long Ponzi scheme that defrauded 988 investors out of more than $50 million. Marshall pleaded guilty to Grand Larceny in the Second Degree, Securities Fraud under the Martin Act, and Scheme to Defraud in the First Degree, and faces four to 12 years in prison plus approximately $90 million in restitution to victims.

Low
CTCoalitionMultistate

American Express, Capital One, Citi Group, Mastercard, Visa, PayPal, Stripe, Sezzle, Block (operator of Square, Cash App, and Afterpay)

On April 28, 2026, Connecticut Attorney General William Tong joined a bipartisan coalition of 24 other attorneys general and New York City in sending letters to major credit card companies and payment processors urging them to block transactions facilitating sales of illegal vaping products. The coalition, led by New York, Pennsylvania, California, and NYC, called for collaboration to stop unlawful sales of unauthorized e-cigarettes that violate federal FDA premarket authorization requirements and the PACT Act. The letters request a meeting to discuss prohibiting noncompliant merchants from using the payment networks, citing past successful government-private sector collaboration in reducing illegal tobacco sales.

Low
FTCSettlement

Steven and Gina Merritt

The FTC settled allegations against Steven and Gina Merritt, high-level participants in the LifeWave MLM company, for making false and unsubstantiated earnings claims to recruit workers despite most LifeWave participants earning little to no money. The stipulated final order prohibits the Merritts from making deceptive earnings representations and requires them to notify their downline participants of the order's prohibitions. No monetary penalty was imposed.

Low
VARegulatory Report

Virginia Attorney General Jay Jones released a 100-day progress report outlining his office's actions, including a pledge to enforce new Virginia Consumer Data Protection Act provisions requiring social media platforms to limit minor users to one hour of daily usage without parental consent, and a data privacy awareness campaign for Virginians. No specific privacy enforcement actions against private entities were detailed in the release.

LowChildren's Data
CAGuidance

California Privacy Protection Agency

The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.

LowNotice FailureOpt-Out FailureData Broker Non-Compliance
FTCEnforcement Action

Innovative Partners, LP; American Collective, LP; Papyrus Green Investments LLC; Health Plan Administrators, LLC; Amani Ibrahim Shokry; Ahmed Ibrihim Shokry

The FTC filed a complaint and obtained a temporary restraining order against six defendants operating a deceptive health care scheme that impersonated government and insurance carriers to sell fake comprehensive health plans. The defendants allegedly charged consumers without express informed consent, failed to disclose material terms including cancellation processes, and misled consumers into paying for inadequate coverage that left many with substantial medical debt. The FTC seeks refunds for affected consumers and alleges violations of the FTC Act, Telemarketing Sales Rule, Impersonation Rule, and Gramm-Leach-Bliley Act.

LowConsent FailureNotice Failure
NJGuidance

Meta Platforms, Inc.

New Jersey Attorney General Jennifer Davenport and the Bureau of Securities issued a public warning to state residents about fraudulent investment schemes proliferating on Meta-owned platforms including Facebook, Instagram, and WhatsApp. The alert details common scam tactics such as pump-and-dump schemes, confidence scams, and fraudulent cryptocurrency offerings, and provides tips for residents to avoid victimization. No enforcement action against any entity was announced in this release.

Low
CPPAGuidance

California Privacy Protection Agency

The California Privacy Protection Agency launched a statewide roadshow to promote its Delete Request and Opt-out Platform (DROP), which allows California residents to request deletion of their personal information from all registered data brokers in a single request. The roadshow aims to increase awareness of data privacy rights and the DROP tool, which data brokers are legally required to process starting August 1, 2026.

LowData Broker Non-Compliance
FTCEnforcement Action

Christopher Carroll

Following an FTC investigation, a federal court granted summary judgment against timeshare exit scheme operator Christopher Carroll, ordering him to pay $140 million total ($95 million in consumer redress, $45 million civil penalty) for defrauding consumers out of over $90 million. The scheme used deceptive direct mail and in-person pitches, falsely claimed affiliation with timeshare companies, failed to provide refunds, and violated the FTC’s Cooling-Off Rule by forcing consumers to sign non-cancellable contracts. Carroll is also permanently banned from marketing timeshare exit services or engaging in deceptive door-to-door sales.

Critical

$140.0M

CTSettlement

Sephora

Connecticut Attorney General William Tong announced a settlement with beauty retailer Sephora resolving an investigation into the company’s marketing of anti-aging skincare products containing active ingredients like retinol to children under 13. Sephora agreed to adopt enforceable safeguards including requiring suppliers to provide age suitability warnings, disclosing those warnings on product pages, training employees to advise young customers, and maintaining a public resource on age-appropriate products. No monetary penalty was imposed.

LowChildren's Data
CTCoalitionMultistate

Consumer Financial Protection Bureau (CFPB)

On April 17, 2026, Connecticut Attorney General William Tong joined a coalition of 23 state attorneys general in sending a comment letter to CFPB Acting Director Russell Vought opposing the CFPB’s proposed strategic plan, which would drastically reduce agency staffing, weaken supervision of financial institutions, and curtail enforcement capacity. The coalition argues the plan would abdicate the CFPB’s statutory obligations, leave consumers vulnerable to fraud and scams, and shift enforcement burden to state agencies. The letter urges the CFPB to reverse course and maintain robust consumer protection efforts.

Low
VAEnforcement ActionMultistate

Live Nation and Ticketmaster

Virginia Attorney General Jay Jones, leading a coalition of 33 other states, secured a jury verdict finding Live Nation and Ticketmaster liable for violating federal and state antitrust laws via anticompetitive conduct including monopolization of event ticketing services and large concert amphitheaters. The jury determined the companies suppressed competition, overcharged consumers, and forced artists to use their promotion services. Remedies and financial penalties will be determined at a subsequent bench trial.

Low
VACoalitionMultistate

Virginia Attorney General Jay Jones joined a bipartisan coalition of 44 state attorneys general in submitting a comment letter supporting a proposed U.S. Department of Labor rule to increase transparency requirements for pharmacy benefit managers (PBMs) servicing employer-funded ERISA health plans. The coalition urged the DOL to clarify that the proposed rule does not preempt existing state PBM transparency laws and to coordinate enforcement with state attorneys general. This action is a policy advocacy comment letter and does not constitute an enforcement action against any specific entity.

Low

Explore Enforcement Data