Court Rules
All enforcement actions
Enforcement ActionLow Risk

Texas Attorney General Sues Temu for Deceptive Marketing and Unlawful Data Harvesting Exposing Data to CCP

PDD Holdings, Inc. and WhaleCo Inc. d/b/a TemuFebruary 19, 2026Texas Attorney General

Summary

Texas Attorney General Ken Paxton filed a lawsuit against PDD Holdings, Inc. and WhaleCo Inc., doing business as Temu, for deceptive marketing and unlawful covert harvesting of Texans’ personal data that was exposed to the Chinese Communist Party. The suit alleges Temu functions as a 'trojan horse' e-commerce app that bypasses security protocols to create a backdoor into users’ private data, which is stored on servers in China. The lawsuit seeks monetary relief under the Texas Deceptive Trade Practices Act, including up to $10,000 per violation and up to $250,000 per violation targeting consumers aged 65 or older.

Contract Impact

In-house legal teams should review all vendor agreements with e-commerce platforms, foreign-affiliated entities, and data processors to ensure express consent clauses for all data collection activities, strict prohibitions on unauthorized data sharing with foreign adversaries or entities, and mandatory security standards that prevent backdoor access to user data. Contracts should also include audit rights to verify data storage locations, compliance with state deceptive trade practices laws like the Texas DTPA, and requirements for explicit disclosure of all data harvesting practices. Additionally, teams should update data processing agreements to prohibit covert data collection and require immediate notification of any unauthorized data access or sharing.

Contract Search Terms

data harvesting consentunauthorized data sharingforeign data storagesecurity backdoorCCP data exposureTexas Deceptive Trade Practices Actdata security protocols

Laws Cited

Texas Deceptive Trade Practices Act (DTPA)

Violation Types

Entity Details

Entity

PDD Holdings, Inc. and WhaleCo Inc. d/b/a Temu

Industry

Retail

Official Sources

Source Evidence

Entity Name
"filed suit against PDD Holdings, Inc. and WhaleCo Inc., doing business as the global online shopping platform “Temu”"
Event Date
"February 19, 2026 | Press Release"
Jurisdiction
"Texas Attorney General Ken Paxton"
Event Type
"Texas Attorney General Ken Paxton today filed suit against PDD Holdings, Inc. and WhaleCo Inc."
Laws Cited
"relief under the Texas Deceptive Trade Practices Act (“DTPA”)"
Violation Types
"covertly harvesting Texans’ personal data"

Related Enforcement Actions

TX

Tris Pharmaceuticals

$7.5M

Texas Attorney General Ken Paxton announced a $7.5 million settlement with Tris Pharmaceuticals over alleged misrepresentations about the efficacy of Dyanavel XR, an ADHD drug marketed for children. The release says the company overstated the drug’s efficacy and directed sales representatives to make misleading claims to doctors, including Medicaid providers.

TX

Plum Organics

Texas Attorney General Ken Paxton announced an agreement with Plum Organics requiring stronger testing and limits for heavy metals in covered baby food products, along with publicly accessible testing results. The release does not state a monetary penalty; the agreement follows an ongoing investigation into baby food manufacturers.

TX

Health Care Service Corporation (including Blue Cross and Blue Shield of Texas)

Texas Attorney General Ken Paxton opened an investigation into Blue Cross and Blue Shield of Texas, its parent Health Care Service Corporation, and related entities over alleged denials or delays of urgent and medically necessary care and potentially burdensome prior authorization requirements. The investigation is ongoing; the Attorney General issued a Civil Investigative Demand to obtain information and assess potential violations of Texas law.

TX

N/A (consumer alert; no enforcement target)

Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofits about a surge of demand letters alleging California Invasion of Privacy Act (CIPA) violations based on common website technologies such as cookies, pixels, and analytics tools. The AG cautions that some letters may exaggerate or misrepresent violations and may be fraudulent, noting serial CIPA plaintiff Vivek Shah has been declared a vexatious litigant. Recipients are advised not to pay or respond directly, to consult privacy counsel, and to report suspected fraud to the Consumer Protection Division.

TX

TikTok

A Texas state district court (Judge Cory Liu) has found TikTok liable for lying to parents about the safety of its platform and for exposing children to inappropriate and explicit content, making Texas the first state in the nation to hold TikTok liable on these claims. The court found that although TikTok claimed it would remove graphic videos depicting drugs, nudity, alcohol, injuries, and profanity, such videos remained accessible to minors, even under 'Restricted Mode.' No penalty has been imposed yet; Attorney General Paxton will proceed to trial, expected next month, where relief and penalties will be determined.

TX

TriWest Healthcare Alliance Corp.

Texas Attorney General Ken Paxton opened an investigation into TriWest Healthcare Alliance Corp., the U.S. government contractor that administers the VA Community Care Network and the Defense Health Agency's TRICARE West Region, over reports that it wrongfully denied health care claims by falsely treating insureds as having other health insurance (OHI). The OAG has issued Civil Investigative Demands (CIDs) and plans to interview consumers and employees to determine whether TriWest violated the Texas Deceptive Trade Practices Act. No findings or penalties have been imposed yet.