A new report by EPIC.org:
In October 2025, EPIC published State Attorneys General & Privacy: Enforcement Trends, 2020-2024. As part of EPIC’s ongoing work to support State AG privacy enforcement, EPIC created this report to serve as a reference tool for regulators seeking to protect our digital privacy and autonomy from corporate interests. It outlines, for example, where State AGs (including five U.S. territories and D.C.) have focused their enforcement efforts, how they collaborate, and what sources of legal authority they have invoked in their privacy-related cases and settlements.
The report examines State AG enforcement actions across six areas of privacy harms: Unwanted Calls & Texts, Data Breach, Data Privacy, Antitrust, Platform Accountability & Governance, and Algorithms & Automated Systems.
EPIC’s report catalogs over 220 cases and settlements, 35 letters, and 20 public investigations from January 2020 through December 2024, providing a detailed look at the breadth and impact of state-level privacy enforcement. The report’s five-year period represents a base understanding of how State AGs used flexible consumer protection authority and federal authority available to them. Equipped with more specific authority in the coming years, State AGs will build on their impressive body of work to combat ongoing consumer privacy harm in the digital age.
EPIC thanks the 56 State and Territorial Attorneys General for their ongoing efforts to protect Americans’ privacy rights. EPIC will continue tracking privacy-related enforcement actions from AGs and is happy to speak with any AGs about this report or privacy enforcement in general. Please feel free to reach out at [email protected].
DOWNLOAD THE REPORT