New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules
All enforcement actions
Enforcement ActionLow Risk

Texas AG Sues TP-Link for Deceptive Marketing and CCP Data Access

TP-Link Systems Inc.February 17, 2026Texas Attorney General

Summary

Texas Attorney General Ken Paxton filed a lawsuit against TP-Link Systems Inc. for deceptively marketing its networking devices and enabling the Chinese Communist Party to access American consumers' devices. The lawsuit alleges that TP Link's products have been used by PRC state-sponsored hackers and that the company is subject to Chinese laws requiring data disclosure. This is part of a coordinated effort to hold China-aligned companies accountable under Texas law.

Contract Impact

In-house legal teams should review contracts with networking device providers and technology vendors with supply chain ties to China to ensure they include representations regarding country of origin, compliance with U.S. and state data privacy laws, and prohibitions on unauthorized data sharing with foreign governments or entities. Clauses related to privacy/security marketing warranties, cybersecurity audit requirements, and breach notification for state-sponsored attacks should be added or updated. Teams should also verify that vendors do not have obligations under foreign laws that require disclosure of customer data to intelligence services.

Contract Search Terms

supply chain country of origindata disclosure to foreign governmentsprivacy/security marketing warrantiescyber attack risk mitigationPRC national data law complianceunauthorized device accesssurveillance safeguardsnetwork security audit requirements

Violation Types

Entity Details

Entity

TP-Link Systems Inc.

Also known as: TP-Link

Industry

Technology

Official Sources

Source Evidence

Entity Name
"TP-Link Systems Inc."
Event Date
"February 17, 2026"
Jurisdiction
"Texas"
Event Type
"sued TP-Link Systems Inc."
Violation Types
"TP Link’s products have been used by People’s Republic of China’s (“PRC”) state-sponsored hacking entities to launch multiple cyber-attack operations against the United States."
Violation Types
"PRC’s national data laws, which require Chinese citizens and firms to support PRC intelligence services by divulging Americans’ data."

Related Enforcement Actions

FL

TP-Link Systems Inc.

Florida Attorney General James Uthmeier issued an investigative subpoena to TP-Link Systems Inc. as part of a consumer protection investigation into the company’s cybersecurity practices, supply-chain infrastructure, and handling of U.S. consumer data, including allegations of unauthorized data sharing with the Chinese Communist Party. The probe will determine if TP-Link misled customers about foreign government access to their personal data, which would violate the Florida Deceptive and Unfair Trade Practices Act, with no findings of wrongdoing yet.

TX

TP-Link Systems Inc.

The Texas Attorney General opened an investigation into TP-Link Systems Inc. for potentially allowing the Chinese government to access Texans' consumer data through back doors in networking equipment. The investigation will examine whether TP Link violated Texas privacy law by misleading consumers about its independence and improperly collecting or disclosing data. This follows a prior privacy notice violation issued to the company.

TX

PDD Holdings, Inc. and WhaleCo Inc. (doing business as Temu)

$3.0M

Texas Attorney General Ken Paxton announced a settlement requiring Temu to protect Texans’ sensitive personal data from exposure to the Chinese Communist Party and to strengthen product-safety practices. Temu must pay Texas $3 million, comply with data-security requirements backed by a potential $8 million annual penalty, conduct annual independent product testing, and take specified action on products found to contain harmful substances.

TX

Albertsons Companies, Inc.

$773.0M

Texas Attorney General Ken Paxton announced that a multistate coalition had secured an opioid settlement with Albertsons, which would require the grocery chain to pay more than $773 million nationally once final. Texas and its political subdivisions may receive up to $57.8 million for opioid abatement; the release does not identify privacy violations.

TX

Gerber Products Company and Nestlé USA, Inc.

Texas Attorney General Ken Paxton sued Gerber Products Company and Nestlé USA, Inc., alleging that Gerber made deceptive safety and testing claims while its baby food contained dangerous levels of toxic heavy metals. The lawsuit asserts claims under the Texas Deceptive Trade Practices Act; the release does not report a settlement, monetary penalty, or court order.

TX

Rubinsky Roofing LLC

$1.5M

The Texas Attorney General obtained a judgment holding Rubinsky Roofing LLC liable for 27 violations of the Texas Deceptive Trade Practices Act, including deceptive practices involving older consumers and payment for unnecessary or unfinished repairs. The judgment requires more than $1.5 million in civil penalties, allocates at least $500,000 to consumer restitution, and permanently bars the company and its owner from the practices at issue.