Paxton sues Meta, WhatsApp over alleged privacy violations
The Landmark Lawsuit That Shook the Tech World
On May 21, 2026, Texas Attorney General Ken Paxton filed a lawsuit against Meta Platforms Inc. and its subsidiary WhatsApp, accusing the messaging giant of systematically misleading users about the privacy of their communications. The suit, filed in Harrison County district court under the Texas Deceptive Trade Practices Act, alleges that WhatsApp's hallmark promise — that not even the company can read your messages — is fundamentally false. With over 3.3 billion users worldwide, the implications of this case stretch far beyond Texas borders, potentially reshaping how digital privacy is enforced across the United States.
The Core Allegation: Encryption That Wasn't
At the heart of the lawsuit is a startling claim: WhatsApp allegedly stored messages in unencrypted form and maintained an internal system through which employees and contractors could access private message content on request. According to the complaint, this access was granted through a tiered "task" system, with requests sometimes processed with little or no scrutiny. The lawsuit argues that this directly contradicts WhatsApp's public assurances that "not even WhatsApp" can read user messages. Texas Attorney General Paxton minced no words in his statement: "WhatsApp markets its services as secure and encrypted, but it does not deliver on those promises. I am suing to protect Texans' privacy and ensure that WhatsApp by Meta does not mislead Texans by unlawfully accessing private conversations and data."
Whistleblowers and Federal Investigations
The lawsuit isn't based on speculation alone. It draws heavily on whistleblower accounts and a previously unreported Commerce Department investigation. According to the filing, a federal investigator concluded that there was "no limit" to the type of WhatsApp message that could be viewed by Meta employees. Additionally, a 2024 whistleblower complaint to the Securities and Exchange Commission described the same internal access system. These sources paint a picture of a company that, despite its public stance, retained the technical capability to decrypt and review user communications. Meta has consistently denied these allegations, calling them "categorically false and absurd."
Meta's Defense: A Decade of Strong Encryption
Meta spokesperson Rachel Holland responded swiftly to the lawsuit: "WhatsApp cannot access people's encrypted communications and any suggestion to the contrary is false. We will fight this suit as we continue defending our strong record on protecting people's messages." The company points to its use of the Signal protocol for over a decade, which it says ensures messages cannot be read by anyone other than the sender and recipient. Meta also highlights that it has never been proven to have violated its encryption promises in court. However, the lawsuit references a 2018 Senate testimony by Mark Zuckerberg, where he stated that "systems do see the content of messages transferred over WhatsApp," a remark that Paxton's team argues undermines Meta's current defense.
Legal Strategy and Broader Implications
Filed under the Texas Deceptive Trade Practices Act, the lawsuit seeks a permanent injunction blocking Meta and WhatsApp from accessing users' messages without consent, as well as monetary penalties of up to $10,000 per violation. Paxton is collaborating with the law firm Keller Postman LLC, the same firm that helped Texas secure a $1.4 billion settlement from Meta in 2024 over facial recognition data. The choice of Harrison County, a courthouse with a single judge that Paxton has frequently used for major privacy cases, suggests a carefully calculated legal strategy. This case is part of a broader pattern: Paxton has previously sued Google, TikTok, Netflix, and Samsung over data privacy violations, signaling an aggressive stance on consumer protection in the digital age.
What This Means for WhatsApp Users
For the average WhatsApp user, the lawsuit raises unsettling questions: Are your private messages truly private? The complaint alleges that Meta employees could access virtually all communications, which, if proven, would represent a massive breach of trust. The case also highlights the tension between encryption and law enforcement access — a debate that has raged since the FBI's standoff with Apple in 2016. While the outcome remains uncertain, the lawsuit could force WhatsApp to change its marketing language or even its technical infrastructure. Users in Texas and beyond should pay close attention, as the ruling could set a precedent for how encryption claims are regulated nationwide.
The Road Ahead: A Battle Over Digital Trust
As the legal battle unfolds, Meta has not yet filed a formal response to the complaint, but its public statements indicate a robust defense. The case is likely to hinge on technical evidence and whistleblower testimony, with both sides digging in for a protracted fight. Meanwhile, a multistate brief signed by 29 states just eight days after Texas filed its suit underscores the broader scrutiny Meta faces. This lawsuit is more than a legal skirmish; it's a referendum on digital trust in an era where billions rely on encrypted platforms for sensitive communications. The outcome could redefine how tech companies advertise privacy — and whether those promises hold up in court.