Court Rules
All enforcement actions
Warning LetterLow Risk

TX AG Notifies 100+ Data Brokers of Registration Failures

Multiple Data BrokersJune 18, 2024Texas Attorney General

Summary

Texas Attorney General Ken Paxton sent notification letters to over 100 companies for failing to register as data brokers under Texas Business and Commerce Code Chapter 509, which requires registration by March 1, 2024, and implementation of data safeguards. This action is part of an initiative to enforce privacy laws and protect consumer data.

Remedy

Companies must register with the Texas Secretary of State and comply with data safeguard requirements; failure may result in penalties under the law.

Contract Impact

In-house legal teams should review all vendor, customer, and data processing agreements where the counterparty may be classified as a data broker under Texas law. Specifically examine clauses addressing data broker registration status, data security safeguards, consumer privacy obligations, and compliance with Texas Business and Commerce Code Chapter 509. Agreements may require amendments to include representations and warranties regarding registration, mandated implementation of data safeguards, audit rights, and termination provisions for non-compliance. Due diligence on counterparties' data broker status and registration evidence should be integrated into onboarding and renewal processes.

Contract Search Terms

data broker registration requirementTexas Business and Commerce Code Chapter 509data safeguards provisiondata broker definition clauseconsumer data protection obligationregistration deadline compliancedata sharing agreement termsprivacy compliance certificationdata processing addendumdata broker status representation

Laws Cited

Texas Business and Commerce Code Chapter 509
Chapter 509

Violation Types

Entity Details

Entity

Multiple Data Brokers

Also known as: Data Brokers

Industry

Data Broker

Official Sources

Related Enforcement Actions

TX

Open AI Global, LLC

Texas Attorney General Ken Paxton sued Open AI Global, LLC and affiliated entities, alleging that ChatGPT was marketed as safe and reliable without disclosing risks of inaccurate or harmful outputs. The suit also alleges harms to minors and collection of their data without parental oversight; the release states no monetary penalty or specific remedy imposed.

TX

Lululemon USA Inc.

Texas Attorney General Ken Paxton secured an Assurance of Voluntary Compliance with Lululemon USA Inc. after investigating potential PFAS and consumer representations about product safety. The agreement requires the company to maintain supply-chain chemical standards, verify vendor compliance through testing or certifications, and take corrective action for three years; no monetary penalty is stated.

TX

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

$3.0M

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

TX

Albertsons Companies, Inc.

$773.0M

Texas Attorney General Ken Paxton announced that a multistate coalition had secured an opioid settlement with Albertsons, which would require the grocery chain to pay more than $773 million nationally once final. Texas and its political subdivisions may receive up to $57.8 million for opioid abatement; the release does not identify privacy violations.

TX

Gerber Products Company and Nestlé USA, Inc.

Texas Attorney General Ken Paxton sued Gerber Products Company and Nestlé USA, Inc., alleging that Gerber made deceptive safety and testing claims while its baby food contained dangerous levels of toxic heavy metals. The lawsuit asserts claims under the Texas Deceptive Trade Practices Act; the release does not report a settlement, monetary penalty, or court order.

TX

Rubinsky Roofing LLC

$1.5M

The Texas Attorney General obtained a judgment holding Rubinsky Roofing LLC liable for 27 violations of the Texas Deceptive Trade Practices Act, including deceptive practices involving older consumers and payment for unnecessary or unfinished repairs. The judgment requires more than $1.5 million in civil penalties, allocates at least $500,000 to consumer restitution, and permanently bars the company and its owner from the practices at issue.