Texas Attorney General Ken Paxton filed a lawsuit against Epic Systems Corporation, a major electronic health records vendor, alleging unlawful monopolization of the EHR industry and deceptive practices that restrict parental access to minor children’s medical records. The privacy-related claim asserts Epic automatically hides children’s medication lists, treatment notes, and provider messages from parents when a child turns 12, violating Texas law guaranteeing parents unrestricted access to their children’s medical records. The action is part of broader efforts to ensure EHR vendors comply with Texas parental access requirements and promote market competition.
In-house legal teams should review contracts with electronic health records (EHR) vendors and health data processors to ensure they do not include terms that restrict parental access to minor children’s medical records, particularly for children aged 12 and older. Clauses related to data access rights, proxy access, and restrictions on data sharing or portability should be updated to comply with state laws requiring unrestricted parental access to minor health data. Additionally, teams should verify that vendor agreements do not include exclusionary terms that limit competition or data interoperability, as such terms may trigger antitrust and privacy scrutiny.
Entity
Epic Systems Corporation
Also known as: Epic Systems
Industry
TechnologyOfficial Press Release
https://www.texasattorneygeneral.gov/news/releases/attorney-general-ken-paxton-sues-major-medical-record-database-gatekeeping-data-and-restricting
Petition 4
https://www.texasattorneygeneral.gov/sites/default/files/images/press/Petition_4.pdf
Texas Attorney General Enforcement Page
https://www.texasattorneygeneral.gov/consumer-protection/privacy
"Epic Systems Corporation (“Epic”)"
"December 11, 2025"
"Texas"
"Tex. Health & Safety Code § 183.006"
"restrict parental access to their minor children’s medical records"
"children’s medication lists, treatment notes, and provider messages from parents"
Texas Attorney General Ken Paxton issued a consumer alert warning Texans about scams, fraudulent charities, and illegal price gouging related to severe flooding. The guidance provides resources for verifying charities and reporting suspected fraud or price gouging to the AG's office.
$150.0M
Texas Attorney General Ken Paxton secured a $150 million multistate settlement against 23andMe following a 2023 data breach that exposed genetic and personal data of 6.9 million consumers. The settlement resolves bankruptcy claims and requires enhanced data security, risk assessments, and an independent advisory board, with immediate recovery of $18 million from bankruptcy funds.
Texas Attorney General Ken Paxton opened an investigation into LinkedIn Corporation over allegations that the company advertised and profited from fake or misleading job opportunities ("ghost jobs") on its platform. The investigation focuses on whether LinkedIn misled consumers who paid for Premium subscriptions by failing to disclose that a significant percentage of job postings may be inactive or not genuine hiring opportunities.
$45.0M
Attorney General Ken Paxton secured a $45 million multistate settlement with Block, Inc. (Cash App) for misleading consumers about the safety of its platform and failing to protect users from fraud. The settlement requires Cash App to maintain 24-hour customer support, cease deceptive safety claims, and fulfill its legal duty to investigate and reimburse unauthorized transactions.
$13.0M
Texas Attorney General Ken Paxton secured a settlement with Walmart over deceptive practices in its Spark Driver program. Walmart misrepresented driver pay, including failing to pass on customer tips and altering base pay after drivers accepted offers. The $13 million settlement provides direct payments to affected Texas drivers and requires Walmart to implement honest compensation practices.
Texas Attorney General Ken Paxton announced an investigation into StubHub for failing to deliver FIFA World Cup tickets that fans purchased. The investigation focuses on reports of 'ghost ticketing,' where sellers list tickets they do not possess, collect payment, and cancel when unable to deliver.