Court Rules
All enforcement actions
Enforcement ActionLow Risk

Florida AG Subpoenas Shein for Unauthorized Data Sharing

SheinFebruary 5, 2026Florida Attorney General

Summary

The Florida Attorney General's Office launched the CHINA Prevention Unit and issued a subpoena to Shein for deceptive trade practices and data privacy violations. The unit focuses on combating threats from foreign adversaries like the Chinese Communist Party to consumer data and economic security. This action is part of broader efforts to audit and hold accountable companies with ties to China.

Contract Impact

In-house legal teams should review vendor, customer, and data processing agreements for clauses governing data sharing, cross-border transfers, and third-party disclosures. Specific attention is needed on consent mechanisms, data localization requirements, and security standards to prevent unauthorized sharing with foreign adversaries. Recommended changes include adding explicit restrictions on data transfers to countries like China, requiring granular consent for international data flows, incorporating robust audit rights, and updating breach notification and subpoena response procedures to address foreign government data requests. Agreements should also be assessed for compliance with state deceptive trade practices laws, such as FDUTPA, to mitigate risks of deceptive data handling representations.

Contract Search Terms

data sharing agreementcross-border data transfer clausedata localization requirementconsent clausethird-party disclosuredata processing addendumsecurity standardsaudit rightssubpoena complianceforeign data access restrictions

Violation Types

Entity Details

Entity

Shein

Industry

Retail

Official Sources

Source Evidence

Entity Name
"Shein"
Violation Types
"deceptive trade practices and data privacy violations"

Related Enforcement Actions

FL

Discord

Florida Attorney General James Uthmeier opened a civil investigation into Discord and issued a subpoena demanding documents related to its marketing to children, age-verification processes, content moderation, parental controls, and reporting of child exploitative activity. The investigation alleges potential violations of Florida’s Deceptive and Unfair Trade Practices Act, citing the platform’s widespread use by child predators to target minors. Discord must produce records on its child safety practices, minor user data, and complaint handling related to child exploitation.

FL

Roblox

Florida Attorney General James Uthmeier filed a lawsuit against Roblox, alleging that the company misrepresented the safety of its platform to parents and failed to protect children from accessing adult content and being contacted by predators. The lawsuit seeks injunctive relief and other remedies to ensure child safety on the platform.

FL

TP-Link Systems Inc.

Florida Attorney General James Uthmeier issued an investigative subpoena to TP-Link Systems Inc. as part of a consumer protection investigation into the company’s cybersecurity practices, supply-chain infrastructure, and handling of U.S. consumer data, including allegations of unauthorized data sharing with the Chinese Communist Party. The probe will determine if TP-Link misled customers about foreign government access to their personal data, which would violate the Florida Deceptive and Unfair Trade Practices Act, with no findings of wrongdoing yet.

FL

Roku, Inc.

Florida Attorney General James Uthmeier filed a civil enforcement action against Roku, Inc. for violating the Florida Digital Bill of Rights (FDBOR) and Florida Deceptive and Unfair Trade Practices Act (FDUTPA). The complaint alleges Roku collected, sold, and enabled reidentification of children’s sensitive personal data, including viewing habits and voice recordings, without parental consent or meaningful notice to consumers. The state seeks civil penalties, injunctive relief, and requirements for Roku to implement transparent disclosures, lawful parental controls, and cease unauthorized processing of children’s data.

FL

Gethins Limited, Toccata, Inc., Segpay Gateway LLC, Segregated Payments, Inc., D/B/A Segpay, Aylo Holdings USA Corp., Aylo Billings US Corp., Aylo Group Ltd, Nutaku Entertainment Ltd.

Florida Attorney General James Uthmeier filed complaints against multiple pornography websites for violating Florida's age-verification law by not verifying users' ages, allowing children access to harmful material. The law requires such sites to implement age verification, and violations can result in fines up to $50,000 per violation. The complaints seek injunctions, civil penalties, and compliance with the law.

FL

Lorex

Florida Attorney General James Uthmeier issued a subpoena to Lorex as part of an ongoing consumer protection and data privacy investigation. The probe examines Lorex’s ties to Dahua Technology and potential foreign spying risks, including unauthorized access to children’s data, and whether the company misled consumers about the privacy and security of its camera products and apps. The subpoena seeks documents related to corporate structure, third-party contracts, software update origins, data center locations, security vulnerabilities, and marketing claims about privacy and security.