Court Rules
All enforcement actions
Enforcement ActionLow Risk

TX AG Notifies TP-Link, Alibaba, CapCut Over TDPSA Violations

TP-Link, Alibaba, CapCutMay 6, 2025Texas Attorney General

Summary

Texas Attorney General Ken Paxton has issued notices to several Chinese companies, including TP-Link, Alibaba, and CapCut, for violating the Texas Data Privacy and Security Act (TDPSA). The companies must comply with TDPSA's requirements to disclose data processing, allow opt-outs, and enable data deletion within 30 days, or face further legal action.

Remedy

The companies are required to comply with TDPSA by disclosing their data processing activities, providing consumers with the right to opt out of data collection, and enabling consumers to delete their personal data within 30 days.

Corrective Notice

Contract Impact

In-house legal teams should review vendor agreements, customer terms of service, and data processing agreements for compliance with the Texas Data Privacy and Security Act (TDPSA). Key clauses to examine include data processing disclosures, opt-out mechanisms for data sales or sharing, data deletion request procedures, and breach notification requirements. Agreements may need amendments to explicitly incorporate TDPSA obligations, such as providing clear notice of data processing activities, honoring consumer opt-out requests, and establishing processes for data deletion within required timeframes. Additionally, ensure that any sub-processor arrangements or data sharing agreements align with TDPSA standards.

Contract Search Terms

data processing disclosureopt-out mechanismdata deletion requestconsumer privacy rightsdata processing addendumdata retention schedulebreach notification clausedata sharing agreement

Laws Cited

Texas Data Privacy and Security Act

Violation Types

Entity Details

Entity

TP-Link, Alibaba, CapCut

Industry

Technology

Official Sources

Related Enforcement Actions

TX

Office of the Attorney General of Texas

Texas Attorney General Ken Paxton issued a consumer alert warning Texans about scams, fraudulent charities, and illegal price gouging related to severe flooding. The guidance provides resources for verifying charities and reporting suspected fraud or price gouging to the AG's office.

TX

23andMe

$150.0M

Texas Attorney General Ken Paxton secured a $150 million multistate settlement against 23andMe following a 2023 data breach that exposed genetic and personal data of 6.9 million consumers. The settlement resolves bankruptcy claims and requires enhanced data security, risk assessments, and an independent advisory board, with immediate recovery of $18 million from bankruptcy funds.

TX

LinkedIn Corporation

Texas Attorney General Ken Paxton opened an investigation into LinkedIn Corporation over allegations that the company advertised and profited from fake or misleading job opportunities ("ghost jobs") on its platform. The investigation focuses on whether LinkedIn misled consumers who paid for Premium subscriptions by failing to disclose that a significant percentage of job postings may be inactive or not genuine hiring opportunities.

TX

Block, Inc.

$45.0M

Attorney General Ken Paxton secured a $45 million multistate settlement with Block, Inc. (Cash App) for misleading consumers about the safety of its platform and failing to protect users from fraud. The settlement requires Cash App to maintain 24-hour customer support, cease deceptive safety claims, and fulfill its legal duty to investigate and reimburse unauthorized transactions.

TX

Walmart, Inc.

$13.0M

Texas Attorney General Ken Paxton secured a settlement with Walmart over deceptive practices in its Spark Driver program. Walmart misrepresented driver pay, including failing to pass on customer tips and altering base pay after drivers accepted offers. The $13 million settlement provides direct payments to affected Texas drivers and requires Walmart to implement honest compensation practices.

TX

StubHub

Texas Attorney General Ken Paxton announced an investigation into StubHub for failing to deliver FIFA World Cup tickets that fans purchased. The investigation focuses on reports of 'ghost ticketing,' where sellers list tickets they do not possess, collect payment, and cancel when unable to deliver.