Court Rules
All enforcement actions
Enforcement ActionLow Risk

Texas AG Sues TP-Link for Deceptive Marketing and CCP Data Access

TP-Link Systems Inc.February 17, 2026Texas Attorney General

Summary

Texas Attorney General Ken Paxton filed a lawsuit against TP-Link Systems Inc. for deceptively marketing its networking devices and enabling the Chinese Communist Party to access American consumers' devices. The lawsuit alleges that TP Link's products have been used by PRC state-sponsored hackers and that the company is subject to Chinese laws requiring data disclosure. This is part of a coordinated effort to hold China-aligned companies accountable under Texas law.

Contract Impact

In-house legal teams should review contracts with networking device providers and technology vendors with supply chain ties to China to ensure they include representations regarding country of origin, compliance with U.S. and state data privacy laws, and prohibitions on unauthorized data sharing with foreign governments or entities. Clauses related to privacy/security marketing warranties, cybersecurity audit requirements, and breach notification for state-sponsored attacks should be added or updated. Teams should also verify that vendors do not have obligations under foreign laws that require disclosure of customer data to intelligence services.

Contract Search Terms

supply chain country of origindata disclosure to foreign governmentsprivacy/security marketing warrantiescyber attack risk mitigationPRC national data law complianceunauthorized device accesssurveillance safeguardsnetwork security audit requirements

Violation Types

Entity Details

Entity

TP-Link Systems Inc.

Also known as: TP-Link

Industry

Technology

Official Sources

Source Evidence

Entity Name
"TP-Link Systems Inc."
Event Date
"February 17, 2026"
Jurisdiction
"Texas"
Event Type
"sued TP-Link Systems Inc."
Violation Types
"TP Link’s products have been used by People’s Republic of China’s (“PRC”) state-sponsored hacking entities to launch multiple cyber-attack operations against the United States."
Violation Types
"PRC’s national data laws, which require Chinese citizens and firms to support PRC intelligence services by divulging Americans’ data."

Related Enforcement Actions

FL

TP-Link Systems Inc.

Florida Attorney General James Uthmeier issued an investigative subpoena to TP-Link Systems Inc. as part of a consumer protection investigation into the company’s cybersecurity practices, supply-chain infrastructure, and handling of U.S. consumer data, including allegations of unauthorized data sharing with the Chinese Communist Party. The probe will determine if TP-Link misled customers about foreign government access to their personal data, which would violate the Florida Deceptive and Unfair Trade Practices Act, with no findings of wrongdoing yet.

TX

TP-Link Systems Inc.

The Texas Attorney General opened an investigation into TP-Link Systems Inc. for potentially allowing the Chinese government to access Texans' consumer data through back doors in networking equipment. The investigation will examine whether TP Link violated Texas privacy law by misleading consumers about its independence and improperly collecting or disclosing data. This follows a prior privacy notice violation issued to the company.

TX

Meta (formerly known as Facebook)

Texas Attorney General Ken Paxton launched an investigation into Meta's Meta AI Glasses over allegations of unlawful facial biometric data collection, deceptive privacy practices, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses' always-on recording mode lacks proper user notice, planned facial recognition features would collect data without consent, and private user videos are accessed by third-party annotators in Kenya. The AG issued a Civil Investigative Demand to Meta to determine violations of Texas privacy laws.

TX

Meta

Texas Attorney General Ken Paxton launched an investigation into Meta regarding its Meta AI Glasses, alleging unlawful collection of facial biometric data, deceptive privacy representations, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses’ always-on recording mode lacks proper notice, subcontractors access private user content including intimate moments, and Meta plans to deploy facial recognition technology to collect unsuspecting individuals’ facial geometry. The AG issued a Civil Investigative Demand to determine if Meta violated Texas law by deceptively misrepresenting its data use practices.

TX

Institutional Shareholder Services, Inc.

Texas Attorney General Ken Paxton filed a lawsuit against proxy advisory firm Institutional Shareholder Services, Inc. (ISS) alleging violations of the Texas Deceptive Trade Practices Act by prioritizing political agendas over sound financial guidance in voting recommendations. The lawsuit seeks an injunction to stop deceptive practices and civil penalties of up to $10,000 per DTPA violation. This action follows a 2025 investigation into ISS and peer firm Glass Lewis & Co.

TX

Albertsons Safeway LLC

Texas Attorney General Ken Paxton secured a settlement via Assurance of Voluntary Compliance with Albertsons Safeway LLC, prohibiting the company from misting organic produce with synthetic pesticides like ProduceMaxx in all Texas stores. The settlement requires Albertsons-owned grocery chains to stop using synthetic antimicrobial pesticides in misting systems on organic produce and implement potable water rinses for organic produce after any prior treatments. The action follows an investigation launched in January 2026 into undisclosed pesticide use on USDA-certified organic produce.