North Dakota · verified official-source register

North Dakota Privacy Enforcement Cases

2 approved, official-source case records from the 50-state register. Dates, amounts, legal context and disposition qualifications are supported by the cited evidence.

2 primary case-source links · 2 unique primary source URLs

Last editorial review (targeted corrections): · Last link check (automated availability check):

Actual case links

North Dakota case register

Each record cites an official Attorney General or state-agency source. Shared multistate amounts should not be summed as unique state penalties. Additional verification sources are identified when an amount has been reconciled.

Verified case 1 of 2

Google

Date
November 29, 2022
Amount
$391.5 million multistate settlement; North Dakota will receive $4.1M
Legal basis
No statutes or laws cited

Why the action was brought

The action concerned Google’s deceptive location-tracking practices involving Google Account settings, including collecting and retaining users’ movement data after users explicitly told Google not to record it. The document says these practices involved data collection, retention, and use, and lacked permission or appropriate disclosures needed for informed consumer decisions about their data.

View Official Case Source ↗ (opens in a new tab)

Verified case 2 of 2

Anthem, Inc.

Date
2020-09-30
Amount
Thirty-Nine Million and Five Hundred Thousand Dollars ($39,500,000.00) total; North Dakota share: One Hundred Fifty Thousand Nine Hundred Ninety-Seven and 25/100 Dollars ($150,997.25)
Legal basis
Health Insurance Portability and Accountability Act of 1996, Public Law 104-191; 45 C.F.R. §§ 160, 162, and 164; North Dakota Unlawful Sales or Advertising Practices, N.D.C.C. §§ 51-15-01 et seq.; North Dakota Notice of Security Breach for Personal Information, N.D.C.C. §§ 51-30-01 et seq.; N.D.C.C. § 54-12-18

Why the action was brought

The Attorneys General investigated a criminal cyberattack publicly announced February 4, 2015. The attacker gained unauthorized access to Anthem’s network and an internally hosted enterprise data warehouse, accessing unencrypted names, birth dates, Social Security numbers, healthcare identification numbers, addresses, email addresses, phone numbers, and employment information of approximately 78,800,000 individuals.

View Official Multistate Case Source ↗ (opens in a new tab)

This register contains approved, official-source privacy, data-breach and data-security enforcement records. Read any case-specific court-approval qualification; inclusion does not confirm payment or final judgment. Shared multistate amounts should not be summed as unique state penalties.

Educational information, not legal advice.

Back to North DakotaAll states

Original case-library snapshot: August 23, 2026. Original state-law research cutoff: August 25, 2026. Monetary-library update: September 16, 2026, not a new full 50-state research cutoff. Targeted Indiana and New Hampshire law review: October 19, 2026 only. Source inclusion does not independently confirm final court entry or payment.