Full Breakdown
Texas Attorney General Sues Meta Over WhatsApp Encryption Claims
5/23/2026, 2:45:50 AM
Alleged Deception About End-to-End Encryption
The Texas Attorney General’s Office filed a lawsuit on May 21, 2026, accusing Meta Platforms Inc. and its messaging app WhatsApp of misleading users about the strength and scope of WhatsApp’s end-to-end encryption (E2EE). The complaint asserts that, despite public statements that “no one—not even WhatsApp and Meta—can access” messages, the companies retain the ability to view “virtually all” private communications and that “there is no limit to the type of WhatsApp message that can be viewed by Meta.” WhatsApp, which serves more than 3 billion users worldwide, markets the service as secure and encrypted.
Legal Basis and Remedies Sought
The suit is brought under the Texas Deceptive Trade Practices Act, the state’s primary consumer-protection statute. Texas seeks a permanent injunction barring Meta and WhatsApp from accessing Texans’ messages without consent, civil penalties of up to $10,000 per alleged violation, plus court costs and attorneys’ fees. The filing references docket No. 26-0393 in Harrison County District Court.
Background: Encryption Claims and Prior Scrutiny
WhatsApp’s E2EE relies on the open-source Signal protocol, which third-party experts have previously validated. In 2018, Meta CEO Mark Zuckerberg testified before U.S. Senate committees that “Facebook systems do not see the content of messages being transferred over WhatsApp.” The lawsuit cites a Bloomberg report that a U.S. Commerce Department Bureau of Industry and Security investigation—closed abruptly after an internal memo warned of unlimited access—had examined similar allegations. A whistleblower complaint to the SEC is also referenced. The case follows Texas’s earlier actions: a 2024 $1.4 billion settlement with Meta over facial-recognition data, a 2025 $1.375 billion settlement with Google, and a May 2025 lawsuit against Netflix.
Key Figures and Organizations
- Ken Paxton – Texas Attorney General, plaintiff.
- Meta Platforms Inc. – Defendant, parent of WhatsApp.
- WhatsApp – Messaging service at issue.
- Andy Stone – Meta spokesperson responding to the suit.
- Rachel Holland – Meta spokesperson quoted in statements.
- Agent, Office of Export Enforcement – Authored the memo cited by the complaint.
- Texas Attorney General’s Office attorneys – Drafted the legal filing.
Official Statements & Responses
Paxton’s filing states that WhatsApp “markets its services as secure and encrypted, but it does not deliver on those promises,” and that the state will protect Texans’ privacy through the lawsuit. Meta, through Andy Stone and Rachel Holland, denied the allegations, asserting that “WhatsApp cannot access people’s encrypted communications” and labeling the claims “false.” Meta also described the lawsuit as “baseless” and pledged to defend its record on message protection.
Criticism & Opposition
Meta’s opposition centers on the lack of technical evidence presented in the complaint. The lawsuit relies primarily on a Bloomberg article and an internal Commerce Department memo; no independent forensic analysis of WhatsApp’s server architecture or access logs is offered. Critics note that the claim of “virtually all” messages being viewable remains unsubstantiated beyond the cited internal memo.
Conflicting Reports & Gaps
- The Commerce Department investigation was closed without public explanation, leaving the reasons for termination unclear.
- The complaint alleges unlimited access, yet provides no data on actual message retrieval or employee usage.
- While the State cites the 2018 Zuckerberg testimony as false, Meta maintains that its systems have never been able to read encrypted content.
Verbatim Quotes
- “WhatsApp markets its services as secure and encrypted, but it does not deliver on those promises.” — Ken Paxton, Texas Attorney General
- “There is no limit to the type of WhatsApp message that can be viewed by Meta,” — Agent, Office of Export Enforcement, U.S. Commerce Department
- “All users were entitled to believe their communications were private when WhatsApp and Meta unequivocally and repeatedly promised that no one—not even WhatsApp and Meta—can access their messages.” — Texas Attorney General’s Office attorneys
- “ A Meta spokesperson denied Paxton’s claims in a statement: “WhatsApp cannot access people’s encrypted communications and any suggestion to the contrary is false.” — Rachel Holland, Meta spokesperson
- “Texans deserve to know whether their private communications are indeed truly private,” — Ken Paxton, Texas Attorney General
Implications for Consumer Protection and Tech Regulation
If the court grants the injunction, Meta could be required to alter its messaging architecture or disclose additional privacy safeguards, setting a precedent for state enforcement of encryption disclosures. The case may influence how other states evaluate the adequacy of consumer-facing privacy claims and could prompt broader legislative scrutiny of end-to-end encryption marketing.
What’s Next
The lawsuit now proceeds to discovery, after which Texas will seek a hearing on the requested injunction. Meta is expected to file a motion to dismiss and to pursue appellate review if adverse rulings occur. The outcome will likely shape future litigation under the Texas Deceptive Trade Practices Act and inform ongoing national debates over encrypted communications and corporate transparency.
