TurboTax is Intuit Inc.'s tax-preparation software, governed by the Intuit Global Privacy Statement covering all Intuit brands (TurboTax, Credit Karma, QuickBooks, Mailchimp). The statement gates 'Tax Return Information' behind consent ('we will not use or disclose your Tax Return Information...unless you consent'), but discloses that Intuit and its 'third-party advertising partners' use cookies, pixel tags and ad networks to tailor advertising based on platform interactions, and states that Intuit (unlike Credit Karma, which is separately said to not sell or share personal information) does not offer a parallel explicit no-sell/no-share carve-out for the core Intuit/TurboTax brand. Intuit Inc. is a Delaware-incorporated, Nasdaq-listed company (NASDAQ: INTU) headquartered in Mountain View, CA. In January 2024 the FTC issued a final order finding Intuit engaged in deceptive 'free' TurboTax advertising in violation of the FTC Act; on March 20, 2026, the U.S. Court of Appeals for the Fifth Circuit vacated that order on constitutional-adjudication grounds -- holding that FTC in-house adjudication of the deceptive-advertising claim violated the constitutional separation of powers -- without reaching the merits of the findings, and held the FTC's enforcement action 'must proceed in federal court,' leaving the agency able to refile; the administrative record's findings stand as history, not as a standing order. Separately, in May 2022 Intuit agreed to a $141 million multistate restitution agreement with all 50 states and the District of Columbia over the same 'free' advertising campaign, and Intuit's own 10-K discloses it remains subject to a 2014 FTC order requiring biennial independent security assessments of Credit Karma data handling for 20 years. In 2026, Senator Ron Wyden and congressional colleagues sent a primary-source letter to the FTC, IRS, DOJ and Treasury alleging 'aggressive data monetization by TurboTax, which asked to track and use taxpayer data a total of 10 times during filing' — an allegation, not an adjudicated finding.
TRACK RECORD
4 ENFORCEMENT ACTIONS
[2026-03-20]
On March 20, 2026, the U.S. Court of Appeals for the Fifth Circuit in Intuit, Inc. v. FTC, No. 24-60040, vacated the FTC's January 2024 Opinion and Final Order over deceptive 'free' TurboTax advertising on constitutional-adjudication grounds, holding that 'adjudication of a deceptive advertising claim before an administrative law judge violated the constitutional separation of powers.' The court did not reach the merits of the deceptive-advertising findings and declined to order dismissal -- 'Dismissal is premature. We hold that FTC's enforcement action must proceed in federal court' -- leaving the FTC able to pursue the same claims in an Article III court.
Intuit's FY2025 Form 10-K discloses that 'our use of Credit Karma member data is subject to an order issued in 2014 by the Federal Trade Commission (FTC) that, among other things, requires maintenance of a comprehensive security program relating to the development and management of new and existing products and services and biennial independent security assessments for 20 years from the date of the order.'
The FTC states it 'issued an Opinion and Final Order that Intuit Inc., the maker of the popular TurboTax tax filing software, engaged in deceptive advertising in violation of the FTC Act and deceived consumers when it ran ads for "free" tax products and services for which many consumers were ineligible,' upholding the Chief Administrative Law Judge's finding. On March 20, 2026, the Fifth Circuit in Intuit, Inc. v. FTC, No. 24-60040, vacated this Opinion and Final Order on constitutional-adjudication grounds and remanded, holding the FTC's enforcement action 'must proceed in federal court' -- a forum holding that did not reach the merits of the deceptive-advertising findings and leaves the FTC able to pursue the claims in federal court; the vacated order's findings stand as history, not as a standing order.
In May 2022, the New York Attorney General announced a multistate agreement -- signed by all 50 states and the District of Columbia -- with TurboTax owner Intuit Inc. over advertising that the states characterized as 'deceiving millions of low-income Americans into paying for tax services that should have been free.' Under the agreement Intuit 'will pay $141 million in restitution to millions of consumers across the nation who were unfairly charged' and 'must suspend TurboTax's "free, free, free" ad campaign.'
The Intuit Global Privacy Statement, which governs TurboTax, states it covers personal information processed 'as necessary to manage, run, improve, and develop our business and personalize your experience while interacting with the Intuit Platform,' and that 'depending on your settings, this may include showing you personalized ads or recommending certain Intuit products based on your interests.'
SEC EDGAR's company registry confirms Intuit Inc. as CIK 0000896878, a Delaware-incorporated company headquartered in California, with State of Inc.: DE and a continuous 10-K filing history.
Intuit Inc.'s FY2025 Form 10-K cover page states its common stock, $0.01 par value, trades under the symbol 'INTU' on the 'Nasdaq Global Select Market,' with principal executive offices at 2700 Coast Avenue, Mountain View, CA 94043.
The Intuit Global Privacy Statement states that, except as necessary to provide tax preparation services or as authorized by law, Intuit 'will not use or disclose your Tax Return Information -- including to Intuit Group Companies -- unless you consent,' a consent gate specific to tax-filing data. The same statement separately states 'Intuit and Mailchimp do not sell Personal Information under the CCPA. Credit Karma does not sell or share Personal Information subject to the CCPA,' explicitly naming a no-sell-or-share carve-out for Credit Karma and Mailchimp without extending the 'or share' language to the core Intuit/TurboTax brand.
A 2026 letter from Senator Ron Wyden and congressional colleagues to the FTC, IRS, Treasury and DOJ, published on Wyden's official Senate site, states that beyond the lawmakers' earlier 2023 finding that H&R Block, TaxAct and TaxSlayer had illegally shared taxpayer data with Meta, their new findings show 'aggressive data monetization by TurboTax, which asked to track and use taxpayer data a total of 10 times during filing' -- an allegation in a congressional letter, not an adjudicated finding.
In May 2022, the New York Attorney General announced a multistate agreement -- signed by all 50 states and the District of Columbia -- with TurboTax owner Intuit Inc. over advertising that the states characterized as 'deceiving millions of low-income Americans into paying for tax services that should have been free.' Under the agreement Intuit 'will pay $141 million in restitution to millions of consumers across the nation who were unfairly charged' and 'must suspend TurboTax's "free, free, free" ad campaign.'
The FTC states it 'issued an Opinion and Final Order that Intuit Inc., the maker of the popular TurboTax tax filing software, engaged in deceptive advertising in violation of the FTC Act and deceived consumers when it ran ads for "free" tax products and services for which many consumers were ineligible,' upholding the Chief Administrative Law Judge's finding. On March 20, 2026, the Fifth Circuit in Intuit, Inc. v. FTC, No. 24-60040, vacated this Opinion and Final Order on constitutional-adjudication grounds and remanded, holding the FTC's enforcement action 'must proceed in federal court' -- a forum holding that did not reach the merits of the deceptive-advertising findings and leaves the FTC able to pursue the claims in federal court; the vacated order's findings stand as history, not as a standing order.
Intuit's FY2025 Form 10-K discloses that 'our use of Credit Karma member data is subject to an order issued in 2014 by the Federal Trade Commission (FTC) that, among other things, requires maintenance of a comprehensive security program relating to the development and management of new and existing products and services and biennial independent security assessments for 20 years from the date of the order.'
On March 20, 2026, the U.S. Court of Appeals for the Fifth Circuit in Intuit, Inc. v. FTC, No. 24-60040, vacated the FTC's January 2024 Opinion and Final Order over deceptive 'free' TurboTax advertising on constitutional-adjudication grounds, holding that 'adjudication of a deceptive advertising claim before an administrative law judge violated the constitutional separation of powers.' The court did not reach the merits of the deceptive-advertising findings and declined to order dismissal -- 'Dismissal is premature. We hold that FTC's enforcement action must proceed in federal court' -- leaving the FTC able to pursue the same claims in an Article III court.
The Intuit Global Privacy Statement discloses that Intuit and 'our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies' and that 'our advertising partners may place cookies on unaffiliated websites in order to serve advertisements that may be relevant to you based on your browsing activities and interests and determine the effectiveness of such advertisements.'