Texas AG Ken Paxton Sues Meta, Alleges WhatsApp Misled Users About Encryption - Meta Platforms (NASDAQ:ME
Lawsuit Overview
Texas Attorney General Ken Paxton has filed a lawsuit against Meta Platforms and its subsidiary WhatsApp, alleging that the companies misled users about the encryption and privacy of their messages. The lawsuit, filed on May 21, 2026, in Harrison County district court, claims that WhatsApp's marketing promises of end-to-end encryption are false and that Meta has access to users' private communications. This legal action is part of Paxton's broader crackdown on tech companies over data privacy concerns.
The lawsuit argues that WhatsApp's encryption claims are deceptive, as the company reportedly stores messages in unencrypted form and operates an internal system that allows employees to access message content. Paxton's office emphasizes that Texans deserve to know if their private communications are truly private, and this lawsuit aims to hold WhatsApp accountable for allegedly failing to deliver on its promises.
Core Allegations
The complaint details specific allegations against Meta and WhatsApp, including that they stored messages in unencrypted form and employed a tiered internal system for employees to request access to private messages. According to the lawsuit, these requests were often processed with little oversight, contradicting the company's assertion that messages are protected from everyone, including the company itself.
The lawsuit also references a Commerce Department investigation that reportedly found no limits on the type of WhatsApp messages Meta employees could view. Additionally, a whistleblower complaint filed with the SEC in 2024 described the same internal access system, further supporting Texas's claims.
Meta's Response
Meta has denied all allegations, calling the claims "categorically false and absurd." A spokesperson reiterated that WhatsApp uses end-to-end encryption based on the Signal protocol, ensuring messages can only be read by the sender and recipient. Meta spokesperson Rachel Holland stated, "WhatsApp cannot access people's encrypted communications, and any suggestion to the contrary is false," and affirmed the company's intent to fight the lawsuit.
This response aligns with Meta's long-standing position, as CEO Mark Zuckerberg previously testified before the U.S. Senate in 2018 that the company does not see the content of messages. However, Paxton's lawsuit challenges this, citing internal systems and whistleblower accounts that suggest otherwise.
Legal Basis and Precedents
The lawsuit is filed under the Texas Deceptive Trade Practices Act, a consumer protection law, and seeks a permanent injunction to prevent Meta from accessing users' messages without consent. It also requests fines of up to $10,000 per violation. Paxton's office has a history of pursuing tech companies, including a landmark $1.4 billion settlement from Meta in 2024 over biometric data misuse.
This case also follows a recent pattern of legal actions against major tech firms, such as Google and TikTok, with Paxton using Harrison County's single-judge court for significant privacy cases. The collaboration with Keller Postman LLC, the law firm that assisted in the prior Meta settlement, underscores the strategic approach.
Implications for Users and Tech Industry
The lawsuit raises critical questions about the true extent of encryption in messaging apps and the responsibilities of tech companies to uphold their privacy promises. If Texas prevails, it could set a precedent for other states to pursue similar actions, potentially reshaping how companies communicate encryption features to consumers. For users, this case underscores the importance of scrutinizing privacy claims and understanding the limitations of encryption.
As the legal proceedings unfold, the outcomes may influence regulatory approaches and consumer trust in digital communication platforms. Tech companies may need to reassess their data access policies and transparency to avoid similar litigation, while users may become more cautious about relying on encryption claims.
While the case is ongoing, with Meta yet to file a formal court response, the allegations have already sparked public debate about privacy in the digital age. The resolution of this lawsuit could have far-reaching consequences for data protection laws and corporate accountability, making it a pivotal moment for consumer privacy advocacy.