North Dakota · verified official-source register

North Dakota Privacy Enforcement Cases

2 verified case records from the authoritative 50-state register. The fields below preserve the supplied amount, date, legal basis and explanation of why the action was brought.

2 official case source links · state register dated August 31, 2026

Actual case links

North Dakota case register

Each record links directly to the official Attorney General or state-agency source supplied for this register. Shared multistate amounts are reproduced as stated and should not be summed as unique state penalties.

Verified case 1 of 2

Google

Date
November 29, 2022
Amount
$391.5 million multistate settlement; North Dakota will receive $4.1M
Legal basis
No statutes or laws cited

Why the action was brought

The action concerned Google’s deceptive location-tracking practices involving Google Account settings, including collecting and retaining users’ movement data after users explicitly told Google not to record it. The document says these practices involved data collection, retention, and use, and lacked permission or appropriate disclosures needed for informed consumer decisions about their data.

View Official Case Source ↗ (opens in a new tab)

Verified case 2 of 2

Anthem, Inc.

Date
2020-09-30
Amount
Thirty-Nine Million and Five Hundred Thousand Dollars ($39,500,000.00) total; North Dakota share: One Hundred Fifty Thousand Nine Hundred Ninety-Seven and 25/100 Dollars ($150,997.25)
Legal basis
Health Insurance Portability and Accountability Act of 1996, Public Law 104-191; 45 C.F.R. §§ 160, 162, and 164; North Dakota Unlawful Sales or Advertising Practices, N.D.C.C. §§ 51-15-01 et seq.; North Dakota Notice of Security Breach for Personal Information, N.D.C.C. §§ 51-30-01 et seq.; N.D.C.C. § 54-12-18

Why the action was brought

The Attorneys General investigated a criminal cyberattack publicly announced February 4, 2015. The attacker gained unauthorized access to Anthem’s network and an internally hosted enterprise data warehouse, accessing unencrypted names, birth dates, Social Security numbers, healthcare identification numbers, addresses, email addresses, phone numbers, and employment information of approximately 78,800,000 individuals.

View Official Multistate Case Source ↗ (opens in a new tab)

Source data is based on verified concluded privacy, data-breach and data-security enforcement actions located on official state Attorney General or state-agency sources. Multistate settlement amounts are reproduced as stated by the official source and should not be summed as unique state penalties.

Educational information, not legal advice.

Back to North DakotaAll states