Texas Attorney General Paxton Enforces Data Privacy Against Google and Meta
- Securityish
- Privacy & Personal Security
Quick Summary
The Securityish Brief
Texas has positioned itself as a leader in data privacy enforcement, particularly under Attorney General Ken Paxton. Over the past two years, the state has secured substantial settlements from major tech companies, including a historic $1.375 billion from Google and $1.4 billion from Meta. These settlements stem from allegations of deceptive trade practices and unauthorized data collection, particularly concerning user geolocation and biometric data.
In January 2022, Paxton filed lawsuits against Google for misleading advertisements and tracking users’ locations without consent, violating Texas’ Deceptive Trade Practices-Consumer Protection Act. Additionally, he accused Google of unauthorized use of biometric data from its products, leading to a significant settlement in May 2025.
Meta faced similar scrutiny, with Paxton suing the company for capturing Texans’ biometric data without consent, resulting in a $1.4 billion settlement in June 2024. This case highlighted the long-term unauthorized use of facial recognition technology by Meta, which had been implemented without user knowledge.
Texas has also taken steps to enforce its Data Privacy and Security Act (TDPSA) against data brokers, recently suing Allstate for collecting and selling consumer data without proper consent. This lawsuit emphasizes the state’s commitment to protecting consumer privacy and holding companies accountable for data practices.
Paxton’s initiatives, including the establishment of a dedicated legal team for privacy law enforcement, signal a robust approach to data privacy in Texas. As one of the few states with a data broker registry, Texas is actively working to regulate data brokers and ensure compliance with privacy laws.
As Texas continues to lead in data privacy enforcement, organizations and users should remain vigilant about their data practices and understand their rights under state laws. The actions taken by Paxton set a precedent for how data privacy will be enforced in the future.
Key Takeaways
- Review your privacy settings on Google and Meta to ensure your data is not being collected without consent.
- Stay informed about Texas’ Data Privacy and Security Act and how it affects your rights as a consumer.
- Monitor your accounts for any unauthorized use of your biometric data or location tracking.
- Consider opting out of data collection practices offered by apps and services you use.
- Engage with organizations advocating for stronger data privacy protections to stay updated on legislative changes.
Key Terms & Concepts
- Deceptive Trade Practices-Consumer Protection Act: In this article, this act refers to Texas legislation aimed at protecting consumers from misleading business practices.
- Capture or Use of Biometric Identifier (CUBI) Act: This act in Texas regulates the collection and use of biometric data, requiring consent from individuals.
- Data Privacy and Security Act (TDPSA): The TDPSA is Texas legislation that enforces data privacy rights and security measures for consumers.
- data broker: A data broker is a company that collects and sells consumer data, often without the knowledge or consent of individuals.
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
Navigation
Your 5-Minute Cybersecurity Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.