The Texas Attorney General’s Office has filed a lawsuit against WhatsApp and its parent company, Meta Platforms Inc. The suit alleges Meta misled consumers regarding the strength and scope of WhatsApp’s encryption measures. A Meta spokesman has denied these allegations.
The lawsuit, filed in Harrison County court, claims WhatsApp and Meta falsely assure users that messages are encrypted. However, the Attorney General argues Meta has access to "virtually all" private communications on the app. Texas Attorney General Ken Paxton stated WhatsApp markets its services as secure but fails to deliver on these promises.
This legal action fits into a broader pattern of increasing scrutiny on data privacy and consumer protection across the United States. Many lawsuits have targeted major technology companies over their handling of user data. For instance, Google agreed in May 2025 to pay GHS 17.5 billion ($1.375 billion) to settle data privacy claims. These cases highlight growing concerns about how large tech firms manage and secure personal information.
Meta spokesman Andy Stone has publicly stated the lawsuit’s allegations are false. He affirmed that WhatsApp cannot access people’s encrypted communications. The lawsuit aims to obtain a court order preventing Meta and WhatsApp from accessing Texans’ WhatsApp messages without their consent. It also seeks significant monetary penalties.
The Texas lawsuit references news reports about a federal investigation into claims that Meta accessed unencrypted WhatsApp messages. It also cites a whistleblower report made to the U.S. Securities and Exchange Commission, adding weight to the allegations. These developments suggest a continued focus on consumer data protection policies.
This case was filed under the Texas Deceptive Trade Practices Act. This law is the state’s primary consumer protection statute. General Paxton’s office has launched several similar data privacy lawsuits against major corporations. These actions reflect a wider trend of state attorneys general challenging tech giants on privacy issues. Another recent example is the lawsuit against Netflix, filed on May 11, which accuses the company of collecting children’s data without consent.
The outcome of this lawsuit could set new precedents for data privacy regulations in the technology sector. It could influence how technology companies communicate their security measures to users. Companies may face stricter requirements for transparency and user consent regarding data access. This will force them to re-evaluate their data handling practices.
Markets and decision-makers will closely monitor the legal proceedings. A ruling against Meta could impact the company’s valuation and operational practices, especially concerning its data privacy policies. This could also encourage other states to pursue similar actions. The tech industry will need to adapt to an environment of increased regulatory oversight and stronger consumer protection demands. This will affect user trust and company liability.