Court Rules
All enforcement actions
Warning LetterLow Risk

Texas AG Paxton Issues 30-Day TDPSA Compliance Notice to Chinese Companies

TP-Link, Alibaba, CapCut, and several other CCP-affiliated Chinese companiesMay 6, 2025Texas Attorney General

Summary

Texas Attorney General Ken Paxton issued a 30-day compliance notice to TP-Link, Alibaba, CapCut, and other CCP-affiliated Chinese companies for violating the Texas Data Privacy and Security Act (TDPSA). The companies are accused of failing to disclose consumer data processing activities, allow opt-out of data collection, and enable consumer data deletion as required by Texas law. If the companies do not comply within 30 days, the Attorney General's office will pursue additional legal action.

Remedy

The named companies must comply with TDPSA requirements within 30 days, including disclosing consumer data processing activities, allowing consumers to opt out of data collection, and enabling consumers to delete their personal data. No monetary penalties or other remedies are imposed unless the companies fail to cure their violations within the 30-day period.

Corrective Notice

Contract Impact

In-house legal teams should review all vendor agreements with technology companies, especially those with CCP affiliations, to ensure compliance with TDPSA requirements. Key clauses to audit include data processing disclosures, consumer opt-out mechanisms, and data deletion rights. Teams should also add provisions for vendor compliance audits, cure periods for privacy breaches, and restrictions on cross-border data transfers to high-risk jurisdictions. Additionally, contracts should include representations that vendors comply with all applicable Texas privacy laws.

Contract Search Terms

TDPSA complianceopt-out mechanismdata deletion rightsconsumer data processing disclosureGlobal Privacy Controlcross-border data transferCCP-affiliated vendor30-day cure period

Laws Cited

Texas Data Privacy and Security Act (TDPSA)

Violation Types

Entity Details

Entity

TP-Link, Alibaba, CapCut, and several other CCP-affiliated Chinese companies

Industry

Technology

Official Sources

Source Evidence

Entity Name
"TP-Link, Alibaba, CapCut, and several other Chinese and Chinese Communist Party (“CCP”) aligned companies"
Laws Cited
"Texas Data Privacy and Security Act (“TDPSA”)"
Violation Types
"The law requires companies to disclose whether they process consumer data, allow consumers to opt out of data collection, and enable consumers to delete their personal data entirely."
Event Type
"given the CCP-affiliated companies thirty days to comply with Texas’s heightened privacy protections."
Jurisdiction
"Attorney General Ken Paxton"
Remedy Summary
"If the companies fail to comply with the TDPSA, additional legal action will be taken."

Related Enforcement Actions

TX

Institutional Shareholder Services, Inc.

Texas Attorney General Ken Paxton filed a lawsuit against proxy advisory firm Institutional Shareholder Services, Inc. (ISS) alleging violations of the Texas Deceptive Trade Practices Act by prioritizing political agendas over sound financial guidance in voting recommendations. The lawsuit seeks an injunction to stop deceptive practices and civil penalties of up to $10,000 per DTPA violation. This action follows a 2025 investigation into ISS and peer firm Glass Lewis & Co.

TX

Meta (formerly known as Facebook)

Texas Attorney General Ken Paxton launched an investigation into Meta's Meta AI Glasses over allegations of unlawful facial biometric data collection, deceptive privacy practices, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses' always-on recording mode lacks proper user notice, planned facial recognition features would collect data without consent, and private user videos are accessed by third-party annotators in Kenya. The AG issued a Civil Investigative Demand to Meta to determine violations of Texas privacy laws.

TX

Meta

Texas Attorney General Ken Paxton launched an investigation into Meta regarding its Meta AI Glasses, alleging unlawful collection of facial biometric data, deceptive privacy representations, and unauthorized sharing of user data with subcontractors. The investigation follows concerns that the glasses’ always-on recording mode lacks proper notice, subcontractors access private user content including intimate moments, and Meta plans to deploy facial recognition technology to collect unsuspecting individuals’ facial geometry. The AG issued a Civil Investigative Demand to determine if Meta violated Texas law by deceptively misrepresenting its data use practices.

TX

Albertsons Safeway LLC

Texas Attorney General Ken Paxton secured a settlement via Assurance of Voluntary Compliance with Albertsons Safeway LLC, prohibiting the company from misting organic produce with synthetic pesticides like ProduceMaxx in all Texas stores. The settlement requires Albertsons-owned grocery chains to stop using synthetic antimicrobial pesticides in misting systems on organic produce and implement potable water rinses for organic produce after any prior treatments. The action follows an investigation launched in January 2026 into undisclosed pesticide use on USDA-certified organic produce.

TX

Southern Poverty Law Center

Texas Attorney General Ken Paxton opened an investigation into the Southern Poverty Law Center (SPLC) over allegations that the organization deceived donors by using millions of dollars in contributions to fund extremist groups including the Ku Klux Klan, which it publicly claimed to oppose. The SPLC was indicted on federal fraud charges in April 2026 for secretly paying leaders of these groups without disclosing the payments to donors. The Texas OAG issued a Civil Investigative Demand to SPLC to probe deceptive donor solicititation and other potential violations of Texas law.

TX

Texas American Muslim University

Texas Attorney General Ken Paxton filed suit against Texas American Muslim University (TexAM) for operating without required state authorization, offering unauthorized degrees, and misleading prospective students. TexAM lacked the necessary certificate of authority to operate as a private postsecondary institution, had a forfeited nonprofit corporate charter, and used branding confusingly similar to Texas A&M University. The AG seeks injunctive relief and civil penalties exceeding $1 million for violations of the Deceptive Trade Practices Act (DTPA) and Texas Education Code.