Connecticut AG Nets $17.1B Meta, $275K TaxAct Privacy Settlements

3 min readSources: National Law Review

Connecticut AG announces major privacy settlements with Meta and TaxAct in 2026.

Why it matters: These deals mark heightened state scrutiny on how digital platforms handle consumer data, posing compliance risks for corporate legal teams and privacy officers. They reinforce the importance of safeguarding sensitive information amid growing regulatory enforcement.

  • $17.1 billion multistate settlement with Meta over addictive Instagram features and youth mental health harms.
  • Connecticut to receive $265.4 million from Meta settlement, half for youth harm remediation.
  • Meta must add safety features like daily time limits and age verification on Facebook and Instagram.
  • TaxAct fined $275,000 for improperly sharing taxpayer data with Meta and Google via third-party trackers from 2018-2022.

On August 26, 2026, Connecticut Attorney General William Tong announced a landmark $17.1 billion multistate settlement with Meta Platforms, Inc. over claims that Instagram was designed with addictive features exposing young users to mental health harms. Connecticut alone will receive up to $265.4 million, with at least half dedicated to remediating youth harms linked to social media use.

The settlement requires Meta to implement specific safety features on its platforms Instagram and Facebook. These include daily time limits for children, nighttime access restrictions, and rigorous age verification measures. AG Tong sharply criticized Meta's tactics, stating, "Meta strip-mined the souls of America's children for maximum profit with abusive and addictive features that unleashed a youth mental health catastrophe. That ends now."

Earlier, on August 19, 2026, the AG secured a separate settlement with TaxAct for $275,000 related to improper disclosure of taxpayers' sensitive financial data. From January 2018 through December 2022, TaxAct used third-party tracking technologies that disclosed detailed taxpayer information to Meta and Google without adequately informing consumers, violating their trust.

The TaxAct agreement imposes strict governance, monitoring, and auditing obligations on its use of trackers going forward. Tong highlighted the breach of trust, emphasizing that taxpayers expect their data to be used only for filing tax returns, not shared improperly with third parties.

Together, these enforcement actions underscore a strong regulatory focus on digital data practices, especially concerning vulnerable groups like youths and individuals’ financial data. Legal teams and compliance officers should note the growing risks and compliance demands from state authorities in digital privacy landscapes.

By the numbers:

  • $17.1 billion — total multistate settlement amount with Meta
  • $265.4 million — funds Connecticut will receive from Meta settlement
  • $275,000 — settlement amount with TaxAct for data disclosure violations
  • January 2018 to December 2022 — period TaxAct disclosed taxpayer data without consent