Texas Attorney General Ken Paxton sued Meta Platforms Inc. and WhatsApp on Thursday, May 21, 2026 [1], over alleged privacy violations.
The lawsuit challenges the fundamental trust users place in encrypted messaging. If the state proves that Meta can access private conversations despite claiming otherwise, it could trigger a massive shift in how consumer protection laws are applied to digital encryption.
Filed in the Texas state court system, the lawsuit alleges that Meta misled consumers regarding the strength and scope of the end-to-end encryption used by WhatsApp [1, 2]. The Attorney General's office said the company deceived users by claiming messages are fully encrypted while allegedly retaining the ability to read those communications [1, 3].
Paxton said, "Texans deserve transparency about the privacy of their communications, and we will hold companies accountable when they mislead consumers" [1].
The state argues that these actions violate Texas consumer-protection law. By marketing the app as a secure environment for private data, the state said Meta created a false sense of security for millions of users [1, 3].
Meta has denied the allegations. A spokesperson for the company said, "The allegations are without merit and the lawsuit is falling apart" [4].
The company maintains that WhatsApp does provide end-to-end encryption, contradicting the claims made in the state's filing [4]. This legal battle centers on whether the technical implementation of encryption matches the marketing promises made to the public [1, 4].
“"Texans deserve transparency about the privacy of their communications"”
This litigation represents a significant escalation in the conflict between state governments and Big Tech over data transparency. By framing the issue as a consumer-protection violation rather than a purely technical dispute, Texas is attempting to create a legal precedent where marketing claims about encryption are treated as binding warranties. A ruling against Meta could force messaging platforms to be more explicit about their data access capabilities or face systemic legal challenges across other U.S. states.
