Court Rules
All enforcement actions
Enforcement ActionLow Risk

TX AG Sues Allstate, Arity for TDPSA Violations Over Driving Data

Allstate and ArityJanuary 13, 2025Texas Attorney General

Consumers Affected

45,000,000

Summary

Texas Attorney General Ken Paxton filed a lawsuit against Allstate and its subsidiary Arity for unlawfully collecting, using, and selling driving data from over 45 million consumers without consent. The data, which includes precise geolocation information, was used to justify insurance premium increases. This action alleges violations of the Texas Data Privacy and Security Act (TDPSA).

Contract Impact

In-house legal teams should review all vendor agreements with mobile app developers, data analytics providers, and insurance partners to ensure compliance with state data privacy laws like the Texas Data Privacy and Security Act (TDPSA). Key clauses to audit include data collection and consent provisions, requiring explicit notice and opt-in consent for collection of sensitive data such as precise geolocation or driving behavior. Contracts should restrict unauthorized sharing or sale of consumer data to third parties, prohibit covert embedding of tracking software in apps, and ban the use of surveillance data for pricing decisions without consumer consent. Teams should also verify vendors provide clear privacy notices, obtain valid consent before collecting or sharing sensitive data, and include audit rights to monitor compliance with applicable privacy laws.

Contract Search Terms

embedded tracking softwaredriving behavior data collectiongeolocation data consentdata sale to insurance providersTDPSA compliancesensitive data noticethird-party data sale authorizationsurveillance-based pricing

Laws Cited

Texas Data Privacy and Security Act (TDPSA)

Violation Types

Entity Details

Entity

Allstate and Arity

Also known as: Allstate

Industry

Insurance

Official Sources

Source Evidence

Entity Name
"Allstate and its subsidiary, Arity"
Laws Cited
"Texas Data Privacy and Security Act (“TDPSA”)"
Violation Types
"Allstate never provided notice or obtained Texans’ consent to collect or sell their sensitive data."
Violation Types
"precise geolocation information"
Violation Types
"selling Over 45 Million Americans’ Driving Data to Insurance Companies"
Violation Types
"used the covertly obtained data to justify raising Texans’ insurance rates"

Related Enforcement Actions

TX

Open AI Global, LLC

Texas Attorney General Ken Paxton sued Open AI Global, LLC and affiliated entities, alleging that ChatGPT was marketed as safe and reliable without disclosing risks of inaccurate or harmful outputs. The suit also alleges harms to minors and collection of their data without parental oversight; the release states no monetary penalty or specific remedy imposed.

TX

Lululemon USA Inc.

Texas Attorney General Ken Paxton secured an Assurance of Voluntary Compliance with Lululemon USA Inc. after investigating potential PFAS and consumer representations about product safety. The agreement requires the company to maintain supply-chain chemical standards, verify vendor compliance through testing or certifications, and take corrective action for three years; no monetary penalty is stated.

TX

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

$3.0M

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

TX

Albertsons Companies, Inc.

$773.0M

Texas Attorney General Ken Paxton announced that a multistate coalition had secured an opioid settlement with Albertsons, which would require the grocery chain to pay more than $773 million nationally once final. Texas and its political subdivisions may receive up to $57.8 million for opioid abatement; the release does not identify privacy violations.

TX

Gerber Products Company and Nestlé USA, Inc.

Texas Attorney General Ken Paxton sued Gerber Products Company and Nestlé USA, Inc., alleging that Gerber made deceptive safety and testing claims while its baby food contained dangerous levels of toxic heavy metals. The lawsuit asserts claims under the Texas Deceptive Trade Practices Act; the release does not report a settlement, monetary penalty, or court order.

TX

Rubinsky Roofing LLC

$1.5M

The Texas Attorney General obtained a judgment holding Rubinsky Roofing LLC liable for 27 violations of the Texas Deceptive Trade Practices Act, including deceptive practices involving older consumers and payment for unnecessary or unfinished repairs. The judgment requires more than $1.5 million in civil penalties, allocates at least $500,000 to consumer restitution, and permanently bars the company and its owner from the practices at issue.