Enforcement data

The enforcement data holds privacy enforcement events from federal and state regulators, such as settlements, fines, consent decrees and investigations. Each event names the company and the violation types, lists the laws cited and the remedies, gives the fine amount when one was announced, and links to the official source.

Why teams use enforcement data

In-house legal teams need to know when regulators take action in their industry. An event against a competitor or a vendor can lead to a contract review, a policy update or a report to the board. Each event is a structured, searchable record with a link to its press release, so it can feed your legal workflows directly. Common uses:

Watch the enforcement events that affect your industry.
Scan vendor contracts when a new type of violation appears, using the search_terms of an event.
Create a matter in your legal workspace when a high-risk event appears.
Track enforcement by jurisdiction or violation type for compliance reports.

What an event contains

Field	Type	Description
`title`	string	The official title of the event
`event_date`	date	The date the event was announced
`jurisdiction`	string	The regulator, such as CA, FTC, NY or TX
`event_type`	string	The kind of event, such as settlement, consent_decree, fine or investigation
`entity_name`	string	The company or organization involved
`fine_amount`	number or null	The monetary penalty, or null when none was announced
`violation_types`	string[]	One or more of the violation types
`risk_level`	string	critical, high, medium or low, as set out in risk levels
`summary`	string	A plain-English summary of the event
`laws_cited`	string[]	The statutes referenced, such as CCPA, the FTC Act or COPPA
`remedy_types`	string[]	The remedies required, such as monetary_penalty, injunction or compliance_program
`search_terms`	string[]	Terms for finding the same issue in your contracts. It can be null
`primary_source_url`	string	A link to the official source, usually the regulator’s press release
`document_urls`	string[]	Links to complaints, judgments and consent orders
`is_multistate`	boolean	Whether several states took part
`co_enforcers`	string[]	The other agencies in a multistate action

Example search

Call search_privacy_enforcement_actions with filters to find the events you need:

{
  "jurisdiction": "CA",
  "violation_type": "opt_out_failure",
  "date_from": "2026-01-01",
  "limit": 10
}

The response is shortened here:

{
  "results": [
    {
      "id": "evt_001",
      "title": "Attorney General Bonta Announces $2.75M CCPA Settlement with Disney",
      "event_date": "2026-02-11",
      "jurisdiction": "CA",
      "event_type": "settlement",
      "entity_name": "The Walt Disney Company",
      "fine_amount": 2750000,
      "violation_types": ["opt_out_failure"],
      "risk_level": "high",
      "summary": "Disney's opt-out processes failed to stop data sharing across devices. $2.75M penalty.",
      "primary_source_url": "https://oag.ca.gov/news/press-releases/..."
    }
  ],
  "total": 1
}

See MCP: enforcement data for the full search_privacy_enforcement_actions reference.

Jurisdictions

The data covers the FTC and state regulators. To list the jurisdictions available today, call get_privacy_enforcement_stats with group_by set to jurisdiction. Use the codes it returns in the jurisdiction filter.

Violation types

Each event carries one or more violation types, in four groups:

Group	Types
Consumer data	opt_out_failure, notice_failure, consent_failure, dark_patterns, data_sharing_unauthorized, data_broker_noncompliance
Sensitive data	children_data, student_data, health_data, employee_data, biometric_data, geolocation_data
Security	data_breach, security_failure, breach_notification_delay
Other	record_retention, ai_automated_decisions, surveillance_pricing

Risk levels

Each event has a risk level, which depends on the fine and the remedies:

Level	Criteria
Critical	Fine exceeds $10M or involves industry-wide injunction
High	Fine exceeds $1M
Medium	Fine between $100K and $1M
Low	Fine under $100K or no monetary penalty

Access methods

You can reach the enforcement data in two ways.

The MCP server has three tools, search_privacy_enforcement_actions, get_privacy_enforcement_action and get_privacy_enforcement_stats. See MCP: enforcement data.
The web console lets you browse and filter events at courtrules.app/enforcement.

Data freshness

The enforcement data is updated daily, and a new event appears after the next daily check. To get only the events since your last check, call search_privacy_enforcement_actions with date_from. One call a day is enough:

{
  "date_from": "2026-03-20",
  "limit": 50
}

The API has no webhooks, so poll with date_from to find new events.

Getting started

Read court rules

Check filing compliance

Read official rulebooks

Monitor enforcement actions

Use with AI agents

Why teams use enforcement data

What an event contains

Example search

Jurisdictions

Violation types

Risk levels

Access methods

Data freshness

​Why teams use enforcement data

​What an event contains

​Example search

​Jurisdictions

​Violation types

​Risk levels

​Access methods

​Data freshness

Why teams use enforcement data

What an event contains

Example search

Jurisdictions

Violation types

Risk levels

Access methods

Data freshness