Court Rules
All enforcement actions
SettlementCritical Risk

Attorney General Ken Paxton Secures $1.4 Billion Settlement with Meta Over Its Unauthorized Capture of Personal Biometric Data

Meta (formerly known as Facebook)July 30, 2024Texas Attorney General

Penalty Amount

$1,400,000,000

Summary

Texas Attorney General Ken Paxton secured a $1.4 billion settlement with Meta over the company’s decade-long unauthorized capture of Texans’ facial geometry via its Tag Suggestions feature, which used facial recognition software without providing notice or obtaining informed consent. The practices violated Texas’s Capture or Use of Biometric Identifier Act (CUBI) and Deceptive Trade Practices Act, as Meta automatically enabled the feature for all Texans without explaining its functionality or seeking permission. This is the largest privacy settlement ever obtained by a single state attorney general, with Meta required to pay the penalty over five years and cease the unlawful biometric data practices.

Remedy

Meta must pay $1.4 billion to the State of Texas over a five-year period and permanently stop capturing or using Texans’ biometric identifiers, including facial geometry, without first providing clear notice and obtaining explicit informed consent as required by Texas law. The settlement is formalized via a final court-ordered consent decree that enjoins all unlawful biometric data collection practices.

Monetary PenaltyInjunctionConsent Decree

Contract Impact

In-house legal teams should immediately review all vendor agreements involving biometric data collection, facial recognition tools, or automated user data capture to ensure compliance with state biometric privacy laws like Texas CUBI. Contracts must include explicit requirements for vendors to provide clear, upfront notice to users about biometric data collection practices and obtain opt-in informed consent before capturing any biometric identifiers (including facial geometry). Clauses related to automatic feature enablement (e.g., photo tagging) should be updated to prohibit activation without user consent, and audit rights should be added to verify vendor compliance. Teams should also ensure vendors are liable for violations of state deceptive trade practices acts related to undisclosed data collection, as penalties for noncompliance can reach billions of dollars.

Contract Search Terms

biometric data consent clausefacial recognition software termsnotice of biometric collectionTexas CUBI complianceinformed consent for data capturebiometric identifier retentionautomated facial geometry scanninguser consent for biometric data

Laws Cited

Violation Types

Entity Details

Entity

Meta (formerly known as Facebook)

Industry

Technology

Official Sources

Source Evidence

Title
"Attor­ney Gen­er­al Ken Pax­ton Secures $1.4 Bil­lion Set­tle­ment with Meta Over Its Unau­tho­rized Cap­ture of Per­son­al Bio­met­ric Data"
Entity Name
"Meta (formerly known as Facebook)"
Fine Amount
"$1.4 billion"
Laws Cited
"Texas's 'Capture or Use of Biometric Identifier' Act (“CUBI”)"
Laws Cited
"the Deceptive Trade Practices Act"
Violation Types
"unlawfully capturing the biometric data of millions of Texans without obtaining their informed consent"

Related Enforcement Actions

TX

Meta (formerly known as Facebook)

Texas Attorney General Ken Paxton launched an investigation into Meta's Meta AI Glasses over allegations of unlawful facial biometric data collection, deceptive privacy practices, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses' always-on recording mode lacks proper user notice, planned facial recognition features would collect data without consent, and private user videos are accessed by third-party annotators in Kenya. The AG issued a Civil Investigative Demand to Meta to determine violations of Texas privacy laws.

TX

N/A (consumer alert; no enforcement target)

Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofits about a surge of demand letters alleging California Invasion of Privacy Act (CIPA) violations based on common website technologies such as cookies, pixels, and analytics tools. The AG cautions that some letters may exaggerate or misrepresent violations and may be fraudulent, noting serial CIPA plaintiff Vivek Shah has been declared a vexatious litigant. Recipients are advised not to pay or respond directly, to consult privacy counsel, and to report suspected fraud to the Consumer Protection Division.

TX

TikTok

A Texas state district court (Judge Cory Liu) has found TikTok liable for lying to parents about the safety of its platform and for exposing children to inappropriate and explicit content, making Texas the first state in the nation to hold TikTok liable on these claims. The court found that although TikTok claimed it would remove graphic videos depicting drugs, nudity, alcohol, injuries, and profanity, such videos remained accessible to minors, even under 'Restricted Mode.' No penalty has been imposed yet; Attorney General Paxton will proceed to trial, expected next month, where relief and penalties will be determined.

TX

TriWest Healthcare Alliance Corp.

Texas Attorney General Ken Paxton opened an investigation into TriWest Healthcare Alliance Corp., the U.S. government contractor that administers the VA Community Care Network and the Defense Health Agency's TRICARE West Region, over reports that it wrongfully denied health care claims by falsely treating insureds as having other health insurance (OHI). The OAG has issued Civil Investigative Demands (CIDs) and plans to interview consumers and employees to determine whether TriWest violated the Texas Deceptive Trade Practices Act. No findings or penalties have been imposed yet.

TX

Amazon.com, Inc.

Texas Attorney General Ken Paxton sued Amazon.com, Inc. on August 31, 2026, alleging Amazon deceived advertisers by claiming to run second-price auctions while secretly applying hidden surcharges and undisclosed 'soft reserve' prices that pushed winners' costs up by roughly 17% on ordinary days and more than 25% during peak events like Prime Day. The hidden surcharges generated roughly $4.5 billion in additional nationwide revenue in 2024, and more than 18,000 Texas sellers and vendors advertise on the platform. The State brings claims under the Texas Deceptive Trade Practices Act, seeking civil penalties of up to $10,000 per violation, an injunction against inaccurate auction descriptions, and per-auction pricing records for every Texas advertiser; the FTC and a coalition of other states filed a parallel federal action the same day.

TX

Meta Platforms, Inc.

$1.0B

Texas Attorney General Ken Paxton secured a historic settlement with Meta Platforms, Inc. requiring Meta to pay over $1 billion and implement significant new safeguards to protect children online. The settlement includes stricter age-assurance measures, a daily two-hour limit for teen users, default disabling of notifications during school hours, hidden likes/reactions, and a nighttime access mode restricting features for children.