Court Rules
All enforcement actions
InvestigationLow Risk

FL AG Subpoenas Lorex Over Chinese Military Ties and Data Privacy

LorexAugust 29, 2025Florida Attorney General

Summary

Florida Attorney General James Uthmeier issued a subpoena to Lorex as part of an ongoing consumer protection and data privacy investigation. The probe examines Lorex’s ties to Dahua Technology and potential foreign spying risks, including unauthorized access to children’s data, and whether the company misled consumers about the privacy and security of its camera products and apps. The subpoena seeks documents related to corporate structure, third-party contracts, software update origins, data center locations, security vulnerabilities, and marketing claims about privacy and security.

Contract Impact

In-house legal teams should review all vendor agreements with IoT device manufacturers, software developers, and cloud providers to ensure compliance with data privacy and security standards. Contracts must require vendors to disclose all corporate affiliates (including foreign-owned entities), certify that no unauthorized parties have access to source code or consumer data, and specify exact data center locations for U.S. user data. Vendors should be contractually obligated to immediately notify the company of security vulnerabilities, breaches, or government access requests, and marketing teams’ privacy/security claims must align with vendor contractual obligations to avoid misrepresentation liability. Additionally, agreements should prohibit unauthorized cross-border data transfers and require regular security audits.

Contract Search Terms

third-party firmware vendor agreementsource code access clausedata center location termsforeign affiliate data sharingprivacy marketing representationssecurity vulnerability remediationcloud service provider agreementcross-border data transfer

Violation Types

Entity Details

Entity

Lorex

Industry

Technology

Official Sources

Source Evidence

Entity Name
"issued a subpoena to Lorex"
Event Date
"Aug 29, 2025"
Jurisdiction
"Attorney General James Uthmeier"
Event Type
"consumer protection investigation"
Violation Types
"possible foreign spying risks, the company’s relationship with Dahua Technology, and whether Lorex misled Florida consumers about the privacy and security of Lorex cameras and apps"
Violation Types
"spy on American children"

Related Enforcement Actions

FL

Discord

Florida Attorney General James Uthmeier opened a civil investigation into Discord and issued a subpoena demanding documents related to its marketing to children, age-verification processes, content moderation, parental controls, and reporting of child exploitative activity. The investigation alleges potential violations of Florida’s Deceptive and Unfair Trade Practices Act, citing the platform’s widespread use by child predators to target minors. Discord must produce records on its child safety practices, minor user data, and complaint handling related to child exploitation.

FL

Shein

The Florida Attorney General's Office launched the CHINA Prevention Unit and issued a subpoena to Shein for deceptive trade practices and data privacy violations. The unit focuses on combating threats from foreign adversaries like the Chinese Communist Party to consumer data and economic security. This action is part of broader efforts to audit and hold accountable companies with ties to China.

FL

Roblox

Florida Attorney General James Uthmeier filed a lawsuit against Roblox, alleging that the company misrepresented the safety of its platform to parents and failed to protect children from accessing adult content and being contacted by predators. The lawsuit seeks injunctive relief and other remedies to ensure child safety on the platform.

FL

TP-Link Systems Inc.

Florida Attorney General James Uthmeier issued an investigative subpoena to TP-Link Systems Inc. as part of a consumer protection investigation into the company’s cybersecurity practices, supply-chain infrastructure, and handling of U.S. consumer data, including allegations of unauthorized data sharing with the Chinese Communist Party. The probe will determine if TP-Link misled customers about foreign government access to their personal data, which would violate the Florida Deceptive and Unfair Trade Practices Act, with no findings of wrongdoing yet.

FL

Roku, Inc.

Florida Attorney General James Uthmeier filed a civil enforcement action against Roku, Inc. for violating the Florida Digital Bill of Rights (FDBOR) and Florida Deceptive and Unfair Trade Practices Act (FDUTPA). The complaint alleges Roku collected, sold, and enabled reidentification of children’s sensitive personal data, including viewing habits and voice recordings, without parental consent or meaningful notice to consumers. The state seeks civil penalties, injunctive relief, and requirements for Roku to implement transparent disclosures, lawful parental controls, and cease unauthorized processing of children’s data.

FL

Gethins Limited, Toccata, Inc., Segpay Gateway LLC, Segregated Payments, Inc., D/B/A Segpay, Aylo Holdings USA Corp., Aylo Billings US Corp., Aylo Group Ltd, Nutaku Entertainment Ltd.

Florida Attorney General James Uthmeier filed complaints against multiple pornography websites for violating Florida's age-verification law by not verifying users' ages, allowing children access to harmful material. The law requires such sites to implement age verification, and violations can result in fines up to $50,000 per violation. The complaints seek injunctions, civil penalties, and compliance with the law.