Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
24 fines found
Total: $6.7B
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2019-07-24 | Meta Platforms | $5.0B | FTC Act Section 5 | FTC | United States | consent | Deceived users about ability to control privacy of personal information. Cambrid...Deceived users about ability to control privacy of personal information. Cambridge Analytica data sharing. Largest FTC fine ever. |
| 2019-07-22 | Equifax | $575.0M | FTC Act Section 5 | FTC | United States | data_breach | 2017 data breach exposed personal information of 147 million people due to failu...2017 data breach exposed personal information of 147 million people due to failure to patch known vulnerability. |
| 2022-12-19 | Epic Games | $520.0M | COPPA | FTC | United States | children | Failed to notify parents and obtain consent before collecting personal informati...Failed to notify parents and obtain consent before collecting personal information from children under 13 playing Fortnite. Also charged with using dark patterns. |
| 2022-12-19 | Epic Games | $245.0M | FTC Act Section 5 | FTC | United States | consent | Used dark patterns to trick players into making unwanted purchases. Separate fro...Used dark patterns to trick players into making unwanted purchases. Separate from COPPA penalty. |
| 2019-09-04 | $170.0M | COPPA | FTC | United States | children | YouTube illegally collected personal information from children without parental ...YouTube illegally collected personal information from children without parental consent, targeting ads to viewers of child-directed channels. | |
| 2024-02-01 | Blackbaud | $49.5M | FTC Act Section 5 | FTC | United States | data_breach | Cloud software company settled with FTC and 49 state AGs after 2020 data breach. |
| 2023-05-31 | Amazon | $30.8M | COPPA | FTC | United States | children | Alexa retained children voice recordings indefinitely ($25M). Ring employees acc...Alexa retained children voice recordings indefinitely ($25M). Ring employees accessed customer video feeds ($5.8M). |
| 2025-01-15 | HoganWillig/Genshin Impact (Cognosphere) | $20.0M | COPPA | FTC | United States | children | Genshin Impact developer settled FTC charges of collecting data from children wi...Genshin Impact developer settled FTC charges of collecting data from children without consent. |
| 2023-06-05 | Microsoft | $20.0M | COPPA | FTC | United States | children | Collected personal information from children creating Xbox accounts without noti...Collected personal information from children creating Xbox accounts without notifying parents or obtaining consent. |
| 2024-02-22 | Avast | $16.5M | FTC Act Section 5 | FTC | United States | consent | Antivirus company sold browsing data through subsidiary Jumpshot despite privacy...Antivirus company sold browsing data through subsidiary Jumpshot despite privacy promises. |
| 2025-12-01 | Disney | $10.0M | COPPA | FTC | United States | children | Failed to manage YouTube channels used by children in compliance with COPPA. |
| 2023-03-02 | BetterHelp | $7.8M | FTC Act Section 5 | FTC | United States | consent | Online therapy service shared health data with advertisers including Facebook an...Online therapy service shared health data with advertisers including Facebook and Snapchat. |
| 2025-09-15 | Dun & Bradstreet/Duns | $5.7M | FTC Act Section 5 | FTC | United States | data_broker | Data broker settlement for unfair and deceptive practices in selling consumer da...Data broker settlement for unfair and deceptive practices in selling consumer data. |
| 2019-02-27 | TikTok | $5.7M | COPPA | FTC | United States | children | Musical.ly (now TikTok) collected personal information from children under 13 wi...Musical.ly (now TikTok) collected personal information from children under 13 without parental consent. |
| 2023-02-01 | GoodRx | $1.5M | Health Breach Notification Rule | FTC | United States | consent | First FTC enforcement under Health Breach Notification Rule. Shared health data ...First FTC enforcement under Health Breach Notification Rule. Shared health data with advertisers. |
| 2022-03-15 | CafePress | $500K | FTC Act Section 5 | FTC | United States | data_breach | Failed to secure consumer data, leading to breach affecting millions. CEO ordere...Failed to secure consumer data, leading to breach affecting millions. CEO ordered to implement security program. |
| 2023-01-05 | Premom (Easy Healthcare) | $100K | FTC Act Section 5 | FTC | United States | consent | Fertility app shared health data with Google and AppsFlyer despite privacy promi...Fertility app shared health data with Google and AppsFlyer despite privacy promises. |
| 2021-01-19 | Zoom | $0 | FTC Act Section 5 | FTC | United States | consent | Engaged in deceptive practices about end-to-end encryption and stored encryption...Engaged in deceptive practices about end-to-end encryption and stored encryption keys on servers. |
| 2021-01-13 | Flo Health | $0 | FTC Act Section 5 | FTC | United States | consent | Period-tracking app shared health data with Facebook and Google despite promisin...Period-tracking app shared health data with Facebook and Google despite promising data would be private. |
| 2024-01-09 | X-Mode Social/Outlogic | $0 | FTC Act Section 5 | FTC | United States | data_broker | Data broker sold precise location data. FTC banned sale of sensitive location da...Data broker sold precise location data. FTC banned sale of sensitive location data. |
| 2022-10-31 | Chegg | $0 | FTC Act Section 5 | FTC | United States | data_breach | Four data breaches from 2017-2020 due to poor security. Required to implement co...Four data breaches from 2017-2020 due to poor security. Required to implement comprehensive security program. |
| 2022-10-24 | Drizly | $0 | FTC Act Section 5 | FTC | United States | data_breach | Data breach exposed information of 2.5 million consumers. CEO personally named i...Data breach exposed information of 2.5 million consumers. CEO personally named in complaint. |
| 2024-01-18 | InMarket | $0 | FTC Act Section 5 | FTC | United States | data_broker | Location data aggregator settled charges. Required to delete data and get consen...Location data aggregator settled charges. Required to delete data and get consent. |
| 2021-09-01 | SpyFone/Support King | $0 | FTC Act Section 5 | FTC | United States | consent | Stalkerware company banned from surveillance business. Harvested private informa...Stalkerware company banned from surveillance business. Harvested private information from phones. |