Texas Attorney General Ken Paxton issued Civil Investigative Demands to Blue Cross Blue Shield of Texas and Conduent Business Services LLC as part of an investigation into a data breach that exposed the protected health information of approximately four million Texans. The breach, which occurred between October 21, 2024 and January 13, 2025, is believed to be the largest in U.S. history. The investigation focuses on Conduent's security measures and BCBS's compliance with state data protection laws.
In-house legal teams should immediately review all vendor, customer, and data processing agreements where Conduent Business Services LLC or similar service providers handle protected health information or sensitive personal data. Focus on clauses governing data security obligations, breach notification timelines and procedures, compliance with state-specific data protection laws (particularly Texas), data processing addendums, and indemnification/liability provisions. Given the investigation into potential negligence and the scale of the breach, contracts may require amendments to mandate stricter security safeguards (e.g., encryption, access controls), explicit adherence to Texas data protection statutes, clearer breach response protocols, and enhanced audit rights to ensure ongoing compliance and allocate risk appropriately.
Entity
Conduent Business Services LLC
Also known as: Conduent
Industry
TechnologyConduent Business Services LLC (Business Associate, NJ) reported a HIPAA breach affecting 42,616 individuals. Breach type: Hacking/IT Incident. Location of breached information: Network Server.
$1.0B
Texas Attorney General Ken Paxton secured a historic settlement with Meta Platforms, Inc. requiring Meta to pay over $1 billion and implement significant new safeguards to protect children online. The settlement includes stricter age-assurance measures, a daily two-hour limit for teen users, default disabling of notifications during school hours, hidden likes/reactions, and a nighttime access mode restricting features for children.
Texas Attorney General Ken Paxton launched an industry-wide investigation into companies marketing avocado oil products that may contain undisclosed seed oils. Civil Investigative Demands were issued to Primal Kitchen, Siete Foods, and Chosen Foods, with more companies expected to be investigated for potential violations of the Texas Deceptive Trade Practices Act.
Attorney General Ken Paxton secured settlements with WK Kellogg Co. and General Mills Inc. requiring the removal of synthetic dyes from cereals served in schools. The companies have already removed these dyes from K-12 cereals, with full removal from all products by the end of 2027.
Texas Attorney General Ken Paxton launched an investigation into the American Academy of Pediatrics (AAP) over concerns that the organization may be promoting and recommending childhood vaccines for financial gain. The AAP has been issued a Civil Investigative Demand to determine the basis of its vaccine recommendations and whether they are influenced by financial incentives from pharmaceutical donors.
Texas Attorney General Ken Paxton announced an investigation into major food manufacturers, including Frito Lay, Flora Food Group, and ACH Foods, over misleading 'heart healthy' labeling. The investigation will examine whether their advertising practices violate the Texas Deceptive Trade Practices Act by misrepresenting the health value of their products. Civil Investigative Demands have been issued to these companies.