Court Rules
All enforcement actions
Enforcement ActionLow Risk

Texas AG Sues TP-Link for Deceptive Marketing and CCP Data Access

TP-Link Systems Inc.February 17, 2026Texas Attorney General

Summary

Texas Attorney General Ken Paxton filed a lawsuit against TP-Link Systems Inc. for deceptively marketing its networking devices and enabling the Chinese Communist Party to access American consumers' devices. The lawsuit alleges that TP Link's products have been used by PRC state-sponsored hackers and that the company is subject to Chinese laws requiring data disclosure. This is part of a coordinated effort to hold China-aligned companies accountable under Texas law.

Contract Impact

In-house legal teams should review contracts with networking device providers and technology vendors with supply chain ties to China to ensure they include representations regarding country of origin, compliance with U.S. and state data privacy laws, and prohibitions on unauthorized data sharing with foreign governments or entities. Clauses related to privacy/security marketing warranties, cybersecurity audit requirements, and breach notification for state-sponsored attacks should be added or updated. Teams should also verify that vendors do not have obligations under foreign laws that require disclosure of customer data to intelligence services.

Contract Search Terms

supply chain country of origindata disclosure to foreign governmentsprivacy/security marketing warrantiescyber attack risk mitigationPRC national data law complianceunauthorized device accesssurveillance safeguardsnetwork security audit requirements

Violation Types

Entity Details

Entity

TP-Link Systems Inc.

Also known as: TP-Link

Industry

Technology

Official Sources

Source Evidence

Entity Name
"TP-Link Systems Inc."
Event Date
"February 17, 2026"
Jurisdiction
"Texas"
Event Type
"sued TP-Link Systems Inc."
Violation Types
"TP Link’s products have been used by People’s Republic of China’s (“PRC”) state-sponsored hacking entities to launch multiple cyber-attack operations against the United States."
Violation Types
"PRC’s national data laws, which require Chinese citizens and firms to support PRC intelligence services by divulging Americans’ data."

Related Enforcement Actions

FL

TP-Link Systems Inc.

Florida Attorney General James Uthmeier issued an investigative subpoena to TP-Link Systems Inc. as part of a consumer protection investigation into the company’s cybersecurity practices, supply-chain infrastructure, and handling of U.S. consumer data, including allegations of unauthorized data sharing with the Chinese Communist Party. The probe will determine if TP-Link misled customers about foreign government access to their personal data, which would violate the Florida Deceptive and Unfair Trade Practices Act, with no findings of wrongdoing yet.

TX

TP-Link Systems Inc.

The Texas Attorney General opened an investigation into TP-Link Systems Inc. for potentially allowing the Chinese government to access Texans' consumer data through back doors in networking equipment. The investigation will examine whether TP Link violated Texas privacy law by misleading consumers about its independence and improperly collecting or disclosing data. This follows a prior privacy notice violation issued to the company.

TX

Open AI Global, LLC

Texas Attorney General Ken Paxton sued Open AI Global, LLC and affiliated entities, alleging that ChatGPT was marketed as safe and reliable without disclosing risks of inaccurate or harmful outputs. The suit also alleges harms to minors and collection of their data without parental oversight; the release states no monetary penalty or specific remedy imposed.

TX

Lululemon USA Inc.

Texas Attorney General Ken Paxton secured an Assurance of Voluntary Compliance with Lululemon USA Inc. after investigating potential PFAS and consumer representations about product safety. The agreement requires the company to maintain supply-chain chemical standards, verify vendor compliance through testing or certifications, and take corrective action for three years; no monetary penalty is stated.

TX

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

$3.0M

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

TX

Albertsons Companies, Inc.

$773.0M

Texas Attorney General Ken Paxton announced that a multistate coalition had secured an opioid settlement with Albertsons, which would require the grocery chain to pay more than $773 million nationally once final. Texas and its political subdivisions may receive up to $57.8 million for opioid abatement; the release does not identify privacy violations.