State Privacy Enforcement Tracker: Every CCPA and State Privacy Fine and Settlement
By ClauseAudit Research · 26 sources ·
How big are CCPA fines?
CCPA fines are real now, and they are getting bigger. The record is General Motors' $12.75 million settlement on May 8, 2026, over selling drivers' location and driving data. Each violation can cost up to $2,663, or $7,988 if it is intentional or involves a minor under 16, and regulators count violations generously.
- General Motors settlement, the largest CCPA penalty to date (May 8, 2026, California Privacy Protection Agency (CalPrivacy))
- $12.75 million
- Maximum CCPA fine per violation / per intentional violation or violation involving minors (Effective January 1, 2025, California Privacy Protection Agency)
- $2,663 / $7,988
- Public enforcement actions under state comprehensive privacy laws in 2025 (2025, Future of Privacy Forum)
- 15
- Disney CCPA settlement over opt-outs that did not work across devices (February 11, 2026, California Department of Justice, Office of the Attorney General)
- $2.75 million
- Tractor Supply fine, the largest CalPrivacy administrative fine (September 30, 2025, California Privacy Protection Agency)
- $1.35 million
- Texas settlement with Meta over facial-recognition biometric data (July 30, 2024, Office of the Texas Attorney General)
- $1.4 billion
- Texas settlement with Google over location, incognito and biometric data (May 9, 2025, Office of the Texas Attorney General)
- $1.375 billion
- TicketNetwork settlement, the first public Connecticut Data Privacy Act enforcement (July 8, 2025, Connecticut Office of the Attorney General)
- $85,000
For years the CCPA looked like a law with a loud bark and very few bites. One settlement in 2022, none in 2023, two in 2024. That pattern broke in 2025, when California announced six CCPA settlements and fines, and 2026 has already produced the biggest one yet.
This tracker lists every public monetary action we could confirm under the CCPA, California's Delete Act and the newer state privacy laws, plus the large Texas cases brought under older statutes. Below the charts, we explain what the cases have in common and which contract terms decide who pays when a vendor is the one that slipped.
Largest CCPA fines and settlements, California AG and CalPrivacy (USD)
Chart data
| Label | Value |
|---|---|
| General Motors (AG, May 2026) | $12.75M |
| Disney (AG, Feb 2026) | $2.75M |
| Healthline Media (AG, Jul 2025) | $1.55M |
| Jam City (AG, Nov 2025) | $1.4M |
| Tractor Supply (CalPrivacy, Sep 2025) | $1.35M |
| Sephora (AG, Aug 2022) | $1.2M |
| PlayOn Sports (CalPrivacy, Mar 2026) | $1.10M |
| American Honda (CalPrivacy, Mar 2025) | $632,500 |
| Sling TV (AG, Oct 2025) | $530,000 |
| Tilting Point Media (AG, Jun 2024) | $500,000 |
| Ford (CalPrivacy, Mar 2026) | $375,703 |
| DoorDash (AG, Feb 2024) | $375,000 |
| Todd Snyder (CalPrivacy, May 2025) | $345,178 |
General Motors at $12.75 million towers over the next case, Disney at $2.75 million. Most of the rest sit between $345,178 and $1.55 million, a range that hurts a mid-size company without threatening it.
Download this chart (PNG)Total CCPA penalties announced per year (USD)
Chart data
| Label | Value |
|---|---|
| 2022 | $1.2M |
| 2023 | $0 |
| 2024 | $875,000 |
| 2025 | $5.81M |
| 2026 (to Oct 18) | $16.98M |
California announced $5.81M in CCPA penalties in 2025 and $16.98M in 2026 through October 18. One settlement drives most of the 2026 total, but the direction is clear.
Download this chart (PNG)Number of CCPA monetary settlements and fines per year (actions)
Chart data
| Label | Value (actions) |
|---|---|
| 2022 | 1 |
| 2023 | 0 |
| 2024 | 2 |
| 2025 | 6 |
| 2026 (to Oct 18) | 4 |
The count went from 0 in 2023 to 6 in 2025. Two enforcers now bring cases. In 2025 the Attorney General brought three and CalPrivacy brought the other three.
Download this chart (PNG)CalPrivacy fines against data brokers for failing to register (USD)
Chart data
| Label | Value |
|---|---|
| S&P Global (Jan 2026) | $62,600 |
| ROR Partners (Dec 2025) | $56,600 |
| Key Marketing Advantage (Jan 2025) | $55,800 |
| Accurate Append (Jul 2025) | $55,400 |
| Infillion / PayDae (Dec 2024) | $54,200 |
| Cybba (Aug 2026) | $52,400 |
| The Data Group (Dec 2024) | $46,600 |
| National Public Data (May 2025) | $46,000 |
| Datamasters (Jan 2026) | $45,000 |
| SalesIntel Research (Sep 2026) | $36,400 |
| Growbots (Nov 2024) | $35,400 |
| UpLead (Nov 2024) | $34,400 |
These are small fines, from $34,400 to $62,600, for something as basic as not registering as a data broker. The point is that CalPrivacy goes after paperwork failures, not just big data scandals.
Download this chart (PNG)State privacy fines and settlements tracker (monetary actions, newest first)
| Date | Enforcer | Company | Law | Amount |
|---|---|---|---|---|
| Oct 16, 2026 | Texas AG | Temu (PDD Holdings / WhaleCo) | Deceptive data-exposure claims (consumer protection) | $3 million |
| Sep 1, 2026 | CalPrivacy | SalesIntel Research | Delete Act | $36,400 |
| Aug 19, 2026 | Connecticut AG | TaxAct | Not specified in release (tracking pixels sharing taxpayer data) | $275,000 |
| Aug 13, 2026 | CalPrivacy | Cybba | Delete Act | $52,400 |
| Aug 11, 2026 | CalPrivacy | LocateSmarter | CCPA and Delete Act | $116,490 |
| May 8, 2026 | California AG + 4 DAs | General Motors | CCPA | $12.75 million |
| Mar 5, 2026 | CalPrivacy | Ford Motor Company | CCPA | $375,703 |
| Mar 3, 2026 | CalPrivacy | PlayOn Sports | California privacy law (CCPA) | $1.10 million |
| Feb 11, 2026 | California AG | Disney | CCPA | $2.75 million |
| Jan 8, 2026 | CalPrivacy | S&P Global | Delete Act | $62,600 |
| Jan 8, 2026 | CalPrivacy | Datamasters (Rickenbacher Data) | Delete Act | $45,000 |
| Dec 3, 2025 | CalPrivacy | ROR Partners | Delete Act | $56,600 (fines and fees) |
| Nov 21, 2025 | California AG | Jam City | CCPA | $1.4 million |
| Oct 30, 2025 | California AG | Sling TV / Dish Media Sales | CCPA | $530,000 |
| Sep 30, 2025 | CalPrivacy | Tractor Supply | CCPA | $1.35 million |
| Jul 29, 2025 | CalPrivacy | Accurate Append | Delete Act | $55,400 |
| Jul 8, 2025 | Connecticut AG | TicketNetwork | Connecticut Data Privacy Act | $85,000 |
| Jul 1, 2025 | California AG | Healthline Media | CCPA | $1.55 million |
| May 9, 2025 | Texas AG | Texas privacy claims (biometric, location, incognito) | $1.375 billion | |
| May 8, 2025 | CalPrivacy | National Public Data (Jerico Pictures) | Delete Act | $46,000 |
| May 6, 2025 | CalPrivacy | Todd Snyder | CCPA | $345,178 |
| Mar 12, 2025 | CalPrivacy | American Honda Motor Co. | CCPA | $632,500 |
| Jan 29, 2025 | CalPrivacy | Key Marketing Advantage | Delete Act | $55,800 |
| Jan 13, 2025 | Texas AG | Allstate and Arity | Texas Data Privacy and Security Act (first state comprehensive privacy law lawsuit) | Lawsuit filed; no settlement found as of Oct 18, 2026 |
| Dec 23, 2024 | CalPrivacy | PayDae (Infillion) | Delete Act | $54,200 |
| Dec 23, 2024 | CalPrivacy | The Data Group | Delete Act | $46,600 |
| Nov 14, 2024 | CalPrivacy | Growbots | Delete Act | $35,400 |
| Nov 14, 2024 | CalPrivacy | UpLead | Delete Act | $34,400 |
| Jul 30, 2024 | Texas AG | Meta | Texas Capture or Use of Biometric Identifier Act | $1.4 billion |
| Jun 19, 2024 | California AG | Tilting Point Media | CCPA and COPPA | $500,000 |
| Feb 21, 2024 | California AG | DoorDash | CCPA and CalOPPA | $375,000 |
| Aug 24, 2022 | California AG | Sephora | CCPA | $1.2 million |
Source: California Department of Justice, Office of the Attorney General, Privacy Enforcement Actions; California Privacy Protection Agency (CalPrivacy), When It Comes to Data Privacy, Consumers Must Be in the Driver's Seat: Attorney General Bonta, Partners Secure $12.75 Million General Motors Privacy Settlement; California Privacy Protection Agency (CalPrivacy), Ford to Change Practices, Pay Fine for Adding Unnecessary Friction to Opt-Out Process; California Privacy Protection Agency (CalPrivacy), Youth Sports Media Company to Pay $1.10 Million Fine, Change Practices Over Privacy Violations; California Privacy Protection Agency (CalPrivacy), CalPrivacy Brings First Action Against a Data Broker Under Both the CCPA and Delete Act; California Privacy Protection Agency (CalPrivacy), CalPrivacy Announces Second Data Broker Enforcement Action in Less than a Week; California Privacy Protection Agency (CalPrivacy), CalPrivacy Continues Enforcement Blitz with Action Against Virginia Data Broker; California Privacy Protection Agency, CalPrivacy Brings New Round of Enforcement Actions Against Data Brokers; California Privacy Protection Agency, CalPrivacy Fines Marketing Firm for Selling Custom Audiences Without Data Broker Registration; California Privacy Protection Agency, Nation's Largest Rural Lifestyle Retailer to Pay $1.35M Over CCPA Violations; California Privacy Protection Agency, Washington Data Broker Agrees to Pay Fine for Failing to Register; California Privacy Protection Agency, CPPA Orders Florida Data Broker to Pay Fine; California Privacy Protection Agency, CPPA Orders Clothing Retailer Todd Snyder to Pay Six-Figure Fine, Overhaul Privacy Practices; California Privacy Protection Agency, Honda Settles with CPPA Over Privacy Violations; California Privacy Protection Agency, CPPA's Enforcement Division Inks Settlement with Fifth Data Broker; California Privacy Protection Agency, Additional Data Brokers Settle With CPPA; California Privacy Protection Agency, CPPA Settles With First Set of Data Brokers; Connecticut Office of the Attorney General, Attorney General Tong Announces $85,000 Settlement with TicketNetwork for Violations of the Connecticut Data Privacy Act; Connecticut Office of the Attorney General, Attorney General Tong Announces Settlement with TaxAct; Office of the Texas Attorney General, Attorney General Ken Paxton Secures Historic $1.375 Billion Settlement with Google Related to Texans' Data Privacy Rights; Office of the Texas Attorney General, Attorney General Ken Paxton Secures $1.4 Billion Settlement with Meta Over Its Unauthorized Capture of Personal Biometric Data; Office of the Texas Attorney General, Attorney General Paxton Secures First-of-Its-Kind Settlement with Temu to Protect Texans' Data from the CCP; Office of the Texas Attorney General, Attorney General Ken Paxton Sues Allstate and Arity for Unlawfully Collecting, Using, and Selling Over 45 Million Americans' Driving Data. Download as image
CCPA penalty and damages amounts after the 2025 CPI adjustment
| CCPA section | What it covers | Before 2025 | From January 1, 2025 |
|---|---|---|---|
| 1798.155(a) | CalPrivacy administrative fine, per violation | $2,500 / $7,500 intentional or under-16 | $2,663 / $7,988 intentional or under-16 |
| 1798.199.90(a) | Attorney General civil penalty, per violation | $2,500 / $7,500 intentional or under-16 | $2,663 / $7,988 intentional or under-16 |
| 1798.150(a)(1)(A) | Data breach statutory damages, per consumer per incident | $100 to $750 | $107 to $799 |
| 1798.140(d)(1)(A) | Annual gross revenue threshold to be a covered business | $25,000,000 | $26,625,000 |
Source: California Privacy Protection Agency, Updated Monetary Thresholds in CCPA. Download as image
How big are CCPA fines, really?
Bigger than they were, and still small next to Texas. The largest CCPA penalty is General Motors at $12.75 million, announced May 8, 2026 and still subject to court approval. Before that the record was Disney at $2.75 million in February 2026, and before that Healthline Media at $1.55 million.
The statute sets the price per violation. Since January 1, 2025, that is up to $2,663 for each violation and $7,988 for each intentional violation or one involving consumers the business knows are under 16. The old figures were $2,500 and $7,500. The word that matters is "each." A broken opt-out button is not one violation. Regulators can count each affected consumer separately, which is how a website bug turns into a seven-figure settlement.
Texas plays in a different league. Its settlements with Meta for $1.4 billion and Google for $1.375 billion came under biometric and other state claims rather than a consumer privacy law, but they show what a determined state attorney general can extract.
What do companies actually get fined for?
Read the cases and a pattern shows up fast. Very few involve hackers. Most involve a privacy choice that the company offered on paper but that did not work in practice. That is good news in one sense: these are problems you can find and fix before a regulator does.
- Opt-outs that fail. Disney's settlement turned on opt-outs that did not carry across devices and services. If a customer says stop selling my data, it has to stop everywhere.
- Friction. Ford paid $375,703 in March 2026 for adding unnecessary steps to its opt-out process. Making people verify their identity or jump through extra hoops just to opt out counts against you.
- Selling sensitive data quietly. The General Motors case was about selling drivers' location and driving-behavior data.
- Tracking tools you did not configure. Pixels, cookies and ad tags installed by marketing teams or vendors are a recurring theme, from Sephora in 2022 to the Connecticut TaxAct settlement for $275,000 in August 2026.
- Missing contract terms. California expects specific language in contracts with the companies you share data with. Regulators have cited gaps in those contracts, including in Honda's $632,500 order.
Why did privacy enforcement speed up in 2025?
Three things changed at once. First, California now has two enforcers instead of one. CalPrivacy fined its first data brokers in late 2024 and issued its first CCPA fine in March 2025, against Honda. It does not need to go to court to do it. The Attorney General kept bringing its own cases on top of that.
Second, the penalty amounts went up. The inflation adjustment that took effect on January 1, 2025 is small per violation, but the law repeats it every two years, so the numbers will keep rising.
Third, the cases got easier to bring. Most of them test things anyone can check from outside: does the opt-out link work, does the cookie banner stop the tracking, is the data broker registered. Regulators do not need a whistleblower for that. A browser is often enough.
For a business, the takeaway is simple. The question is no longer whether privacy rules get enforced. It is whether your own setup, and the vendors behind it, would hold up if someone clicked through it today.
Are states other than California enforcing their privacy laws?
Yes, though slowly. The Future of Privacy Forum counted 15 public enforcement actions under state consumer privacy laws in 2025, after only three in all the years before. That count includes five Texas lawsuits against connected TV makers. When FPF counts these, it means the broad consumer privacy laws that states such as Connecticut and Texas passed after California.
Connecticut announced its first settlement under the Connecticut Data Privacy Act in July 2025, an $85,000 deal with TicketNetwork. Texas filed the first lawsuit under a state consumer privacy law against Allstate and its data unit Arity in January 2025, and in October 2026 announced a $3 million settlement with Temu over deceptive data-exposure claims.
The amounts outside California are modest so far, but the first case in any state is usually a warning shot. Once an attorney general has a template, the next ones come faster.
Can a vendor's mistake get your business fined?
Yes, and this is the part most small companies miss. Privacy law puts the duty on the business that collects the data. If your analytics vendor, chat widget or marketing platform mishandles it, the regulator's letter still comes to you.
Say you run an online store and use a consent tool that a vendor set up. If the tool keeps sending data to ad networks after a shopper opts out, that is your violation. Your only route to get the money back is the contract you signed with the vendor, and many standard SaaS terms cap the vendor's liability at the fees you paid over the past year, and some exclude regulatory fines altogether.
The same logic runs in reverse. If you are a freelancer or agency that installs tracking code or handles customer lists for clients, a client facing a fine will look at your contract to see what you promised. Broad promises to comply with all privacy laws, paired with unlimited indemnity, can leave a one-person shop holding a bill it never priced into the job. Limit your promise to the work you actually do, and get instructions about tracking in writing.
What should you do now?
- Make a list of every tool that touches customer data, including pixels and plug-ins, and find the contract or terms for each.
- Check that each vendor contract limits how the vendor can use your data, including for training its own products.
- Test your own opt-out flow on a phone and a laptop. If it is annoying to you, it is a risk.
- Ask vendors whether their liability cap carves out data protection and privacy claims. If not, push for a separate, higher cap.
- If you share or sell data, confirm you are not acting as an unregistered data broker. Every fine on the data broker chart above came from that alone.
- If you do client work, keep a written record of what tracking you installed and on whose instructions.
How ClauseAudit helps
Almost every case in this tracker had a contract somewhere in the background: a vendor agreement, a data processing addendum, or terms that let a partner use data more freely than the customer ever agreed to. Our automated review reads your SaaS or vendor contract and flags the clauses that decide who carries the risk if a regulator calls.
Upload the agreement or paste the text and you get each risky clause in plain English, with a suggested fix you can send back to the vendor.
- Data use limits: whether the vendor can use, sell, share or train models on your customer data
- Liability cap: whether privacy and data protection claims are carved out of a low cap
- Indemnity: whether the vendor covers fines and claims caused by its own mistakes
- Data processing terms: whether a DPA with the required restrictions is attached and binding
- Breach notice and cooperation: how fast the vendor must tell you and help you respond
- Deletion on termination: whether your data is returned and deleted when the contract ends
Frequently asked questions
What is the largest CCPA fine so far?
The largest is General Motors at $12.75 million, announced May 8, 2026 by the California Attorney General with four county district attorneys. It concerns the sale of drivers' location and driving-behavior data and is subject to court approval. The previous record was Disney's $2.75 million settlement in February 2026.
How much is a CCPA fine per violation?
From January 1, 2025, the CCPA allows up to $2,663 per violation and $7,988 per intentional violation or violation involving consumers the business knows are under 16. Before the inflation adjustment the amounts were $2,500 and $7,500. The same limits apply to CalPrivacy fines and Attorney General civil penalties.
Who enforces the CCPA?
Two bodies. The California Attorney General can sue and settle for civil penalties, and the California Privacy Protection Agency, now called CalPrivacy, can issue administrative fines. They sometimes work together, as in the General Motors case, which also involved four county district attorneys. Consumers can sue directly only after certain data breaches.
What is the largest fine from CalPrivacy itself?
Tractor Supply's $1.35 million fine, announced September 30, 2025, was the largest in the agency's history at the time. PlayOn Sports, fined $1.10 million in March 2026, is the next largest. Most other CalPrivacy CCPA fines on record are smaller, such as Honda at $632,500 and Todd Snyder at $345,178.
Does the CCPA apply to my small business?
It applies to for-profit businesses that do business in California and meet a threshold, one of which is annual gross revenue above $26,625,000 as adjusted from January 1, 2025. Other thresholds turn on how much personal information you buy, sell or share. Even if you fall below them, your larger clients may require CCPA terms in your contract.
Can consumers sue for a data breach under the CCPA?
Yes, but only for certain breaches caused by a failure to keep reasonable security. Statutory damages now run from $107 to $799 per consumer per incident, up from $100 to $750. Because the amount multiplies by the number of people affected, breach claims can grow quickly for any business holding a large customer list.
What is the Delete Act and why are data brokers being fined?
California's Delete Act requires data brokers to register with CalPrivacy. The agency has fined brokers that failed to register, with amounts in this tracker ranging from $34,400 to $62,600. If your business buys or sells personal information about people it has no direct relationship with, check if your business counts as a data broker.
Are Texas privacy settlements really in the billions?
Two of them are. Texas settled with Meta for $1.4 billion in July 2024 and with Google for $1.375 billion in May 2025. Neither came under the Texas consumer privacy law. The Meta case used the state's biometric identifier law, and the Google case combined location, incognito and biometric claims.
Does a vendor contract protect me from a privacy fine?
It can shift the cost, but it rarely stops the fine. Regulators hold the business that collected the data responsible. Your contract decides whether you can recover the money from a vendor that caused the problem, so check the indemnity, the liability cap and whether privacy claims sit outside that cap.
Use this data
Every chart and card below is free to reuse under CC BY 4.0. Download what you need and link back to this page.
Stat cards
Key findings card
Infographic
Largest CCPA fines and settlements, California AG and CalPrivacy (USD)
Total CCPA penalties announced per year (USD)
Number of CCPA monetary settlements and fines per year (actions)
CalPrivacy fines against data brokers for failing to register (USD)
State privacy fines and settlements tracker (monetary actions, newest first)
CCPA penalty and damages amounts after the 2025 CPI adjustmentEmbed the infographic
Free to share on your site, blog or slides under CC BY 4.0. Please keep the credit link.
Sources and method
Every number on this page comes from the sources below, each opened and read on or before October 18, 2026. A second, independent review checked every figure against its source and corrected anything that did not match. Figures that could not be confirmed were left out.
- California Privacy Protection Agency (CalPrivacy), When It Comes to Data Privacy, Consumers Must Be in the Driver's Seat: Attorney General Bonta, Partners Secure $12.75 Million General Motors Privacy Settlement (May 8, 2026)
- California Department of Justice, Office of the Attorney General, California Won't Let It Go: Attorney General Bonta Announces $2.75 Million Settlement with Disney, Largest CCPA Settlement in California History (February 11, 2026)
- California Department of Justice, Office of the Attorney General, Privacy Enforcement Actions (Accessed October 2026 (latest entry May 8, 2026))
- California Privacy Protection Agency, Updated Monetary Thresholds in CCPA (Posted December 17, 2024; effective January 1, 2025)
- Future of Privacy Forum, U.S. Privacy Enforcement in 2025 (Retrospective) (February 2026)
- California Privacy Protection Agency, Nation's Largest Rural Lifestyle Retailer to Pay $1.35M Over CCPA Violations (September 30, 2025)
- California Privacy Protection Agency, Honda Settles with CPPA Over Privacy Violations (March 12, 2025)
- California Privacy Protection Agency, CPPA Orders Clothing Retailer Todd Snyder to Pay Six-Figure Fine, Overhaul Privacy Practices (May 6, 2025)
- California Privacy Protection Agency (CalPrivacy), Youth Sports Media Company to Pay $1.10 Million Fine, Change Practices Over Privacy Violations (March 3, 2026)
- California Privacy Protection Agency (CalPrivacy), Ford to Change Practices, Pay Fine for Adding Unnecessary Friction to Opt-Out Process (March 5, 2026)
- California Privacy Protection Agency (CalPrivacy), CalPrivacy Brings First Action Against a Data Broker Under Both the CCPA and Delete Act (August 11, 2026)
- California Privacy Protection Agency (CalPrivacy), CalPrivacy Announces Second Data Broker Enforcement Action in Less than a Week (August 13, 2026)
- California Privacy Protection Agency (CalPrivacy), CalPrivacy Continues Enforcement Blitz with Action Against Virginia Data Broker (September 1, 2026)
- California Privacy Protection Agency, CalPrivacy Brings New Round of Enforcement Actions Against Data Brokers (January 8, 2026)
- California Privacy Protection Agency, CalPrivacy Fines Marketing Firm for Selling Custom Audiences Without Data Broker Registration (December 3, 2025)
- California Privacy Protection Agency, Washington Data Broker Agrees to Pay Fine for Failing to Register (July 29, 2025)
- California Privacy Protection Agency, CPPA Orders Florida Data Broker to Pay Fine (May 8, 2025)
- California Privacy Protection Agency, CPPA's Enforcement Division Inks Settlement with Fifth Data Broker (January 29, 2025)
- California Privacy Protection Agency, Additional Data Brokers Settle With CPPA (December 23, 2024)
- California Privacy Protection Agency, CPPA Settles With First Set of Data Brokers (November 14, 2024)
- Connecticut Office of the Attorney General, Attorney General Tong Announces $85,000 Settlement with TicketNetwork for Violations of the Connecticut Data Privacy Act (July 8, 2025)
- Connecticut Office of the Attorney General, Attorney General Tong Announces Settlement with TaxAct (August 19, 2026)
- Office of the Texas Attorney General, Attorney General Ken Paxton Secures Historic $1.375 Billion Settlement with Google Related to Texans' Data Privacy Rights (May 9, 2025)
- Office of the Texas Attorney General, Attorney General Ken Paxton Secures $1.4 Billion Settlement with Meta Over Its Unauthorized Capture of Personal Biometric Data (July 30, 2024)
- Office of the Texas Attorney General, Attorney General Paxton Secures First-of-Its-Kind Settlement with Temu to Protect Texans' Data from the CCP (October 16, 2026)
- Office of the Texas Attorney General, Attorney General Ken Paxton Sues Allstate and Arity for Unlawfully Collecting, Using, and Selling Over 45 Million Americans' Driving Data (January 13, 2025)
Cite this page
ClauseAudit, “State Privacy Enforcement Tracker: Every CCPA and State Privacy Fine and Settlement”, updated October 18, 2026, https://clauseaudit.com/data/state-privacy-enforcement-tracker. Free to reuse with a link back (CC BY 4.0).
This page summarises published data and law as checked on October 18, 2026. Figures are updated as new editions are released, and your own situation may differ. It is general information, not legal, tax or financial advice.