On May 5, 2026, Texas Attorney General Ken Paxton announced an investigation into a U.S.-based drone wholesale company. In his press release, Paxton states that the drone company misrepresented its data privacy and security practices to consumers in violation of the Texas Deceptive Trade Practices Act and allegedly concealed ties to China.

“These products raise serious concerns, including unauthorized data collection, surveillance capabilities, and potential access by the Chinese government,” said Paxton. As part of the investigation, the Texas Attorney General’s Office has issued a civil investigative demand.

Paxton’s press release alleges that the drone company may be acting as a distributor for a Chinese-affiliated robotics company. On Feb. 17, 2026, Paxton sued the robotics company for allegedly misleading Texans about the origin, data practices, and security risks of drones. That lawsuit asserts that the robotics company misled consumers by failing to disclose that its drones use hardware, encrypted firmware, and software components from a firm with purported ties to China. The lawsuit further claims that the robotics company served as a passthrough for data collection and surveillance by the Chinese government.

The investigation into the drone wholesaler and the robotics company lawsuit are part of a broader effort by the Attorney General’s Office to “protect Texans from foreign adversaries that seek to exploit technology for surveillance and data collection.”

Key Takeaways

This investigation follows multiple lawsuits recently brought by Texas against companies with purported ties to China — including five lawsuits filed in February 2026 — involving data privacy and surveillance issues. Companies that partner or have common ownership with Chinese firms may face increased scrutiny by Texas regulators, particularly if their products have audio, visual, or other potential surveillance capabilities with components sourced from China. Companies may consider reviewing their supply chain logistics and marketing materials to help prevent misrepresentations to consumers regarding country-of-origin claims or business relationships with foreign firms.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Timothy A. Butler Timothy A. Butler

Tim Butler helps companies thrive by developing tailored strategies to address their regulatory compliance challenges and vigorously defending them in government enforcement actions and bet-the-company lawsuits.

A former prosecuting attorney for the Federal Trade Commission (FTC) and former senior official in the Georgia…

Tim Butler helps companies thrive by developing tailored strategies to address their regulatory compliance challenges and vigorously defending them in government enforcement actions and bet-the-company lawsuits.

A former prosecuting attorney for the Federal Trade Commission (FTC) and former senior official in the Georgia Attorney General’s Office, Tim has led the defense of dozens of government investigations and enforcement actions brought by the FTC, the Consumer Financial Protection Bureau (CFPB), and the various state attorneys general. Tim also regularly defends clients in bet-the-company lawsuits, including complex business disputes and consumer class actions alleging privacy, false advertising, and unfair or deceptive business practice claims.

Tim is an experienced guide for companies struggling with regulatory complexity. He offers clear advice that helps his clients meet the demands of the ever-growing set of laws and regulations governing data privacy and cybersecurity, advertising and marketing practices, and consumer financial products and services. Clients rely on Tim’s business-minded and practical strategies to address their most difficult regulatory compliance challenges.

A graduate of the University of Chicago and Stanford Law School, Tim is a prolific author and regularly speaks to industry and trade groups about the evolving privacy landscape, about cutting-edge issues affecting payments and fintech companies, and about developments at the FTC, the CFPB, and within the state attorneys general community.

Photo of Matthew White Matthew White

Matt White guides clients through regulatory compliance challenges and represents clients in regulatory and civil investigations and litigation.

Matt has counseled fintech and payment companies on regulatory compliance matters, including those involving the Electronic Fund Transfer Act, the Fair Credit Reporting Act, the…

Matt White guides clients through regulatory compliance challenges and represents clients in regulatory and civil investigations and litigation.

Matt has counseled fintech and payment companies on regulatory compliance matters, including those involving the Electronic Fund Transfer Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the Truth in Lending Act, and their respective implementing regulations (Regulations E, V, P, and Z). Adept with the Consumer Financial Protection Bureau’s (CFPB) Prepaid Rule, Matt has provided guidance regarding prepaid cards and related compliance.

Matt has also aided clients in developing regulatory compliant products and functionalities, including an earned wage access program, reimbursement prepaid card programs, new merchant cash advance products, and tokenized payment capabilities. In connection with products on which Matt advises, he has also negotiated high-stakes technology sales agreements involving complex regulatory issues, including compliance with data privacy laws, financial regulations, and card network rules.

Beyond helping clients strategize for regulatory complexity, Matt also helps clients navigate government investigations and enforcement actions brought by the Federal Trade Commission (FTC), CFPB, and state attorneys general.

Photo of Tessa Cierny Tessa Cierny

Tessa Cierny advises companies on financial technology and data privacy issues. She has experience counseling companies on state and federal regulatory compliance, including existing and emerging privacy laws, such as the E.U.’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act

Tessa Cierny advises companies on financial technology and data privacy issues. She has experience counseling companies on state and federal regulatory compliance, including existing and emerging privacy laws, such as the E.U.’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as financial and banking regulations, such as the CFPB’s Section 1071 Small Business Lending Rule (Regulation B). In addition, she assists clients in defending business disputes and data breach litigation.

Prior to joining Greenberg Traurig, she served as global records manager for WestRock, where she developed and implemented email and data retention policies for global data privacy regulation compliance. In this role, she also advised on data privacy concerns related to data retention, data loss prevention, and data governance.

Photo of Cody B. Davis Cody B. Davis

Cody Davis advises clients on regulatory compliance, data privacy, and consumer protection matters within the financial technology sector, with a focus on payments, emerging platforms, and evolving regulatory frameworks. He works with companies navigating complex federal and state requirements, including regulatory compliance, government…

Cody Davis advises clients on regulatory compliance, data privacy, and consumer protection matters within the financial technology sector, with a focus on payments, emerging platforms, and evolving regulatory frameworks. He works with companies navigating complex federal and state requirements, including regulatory compliance, government investigations, and risk management across the fintech ecosystem.

Cody also has prior experience working with clients in the health care space on mergers and acquisitions as well as regulatory compliance with HIPAA, state telehealth rules, and facility licensure requirements.