Chinese discount marketplace Temu agreed to pay $3 million to settle Texas state data privacy claims. The deal also restricts how it handles personal customer information.
Enforcement targeted a massive footprint. As of September 2023, Temu counted more than 82.4 million active users across the United States.
Data firewalls and transfer limits
Documents released October 16 show Temu agreed to store personal information on US servers. Transmissions to China must be limited strictly to details required to complete and deliver orders, such as shipping addresses.
State officials confirmed this is the first binding settlement where Temu accepted formal limits on cross-border data routing. Non-compliance carries real teeth. Texas can impose penalties of $8 million for each year a violation occurs.
Temu admitted no wrongdoing under the consent order. The company stated it “has come to an agreement to resolve this matter as we continue to focus on serving consumers and supporting businesses across Texas.”
Mandatory audits and seller bans
The terms reach beyond digital privacy into physical supply chain liability. Temu must run annual independent safety audits to screen merchandise for hazardous chemicals and toxic materials. Regulators are focusing heavily on apparel and children’s goods.
When tests flag unsafe inventory, listings must come down immediately. The company must also terminate responsible merchants and their storefronts, alert affected Texas buyers, and process full refunds.
Attorney General Ken Paxton said the agreement forces Temu to run strict product audits while blocking unchecked harvesting of consumer data.
The squeeze on direct-from-China models
For cross-border operators in Guangzhou and Yiwu, the settlement alters the math of selling into North America. Direct-to-consumer platforms built scale by cutting out local importers and skipping conventional compliance overheads. Mandatory third-party testing and fast merchant bans now add friction to low-margin supplier models.
Other state regulators now have a blueprint to replicate. Asian e-commerce platforms face rising costs to keep access to American shoppers. That means spending more on software audits and product verification.
Escalating state scrutiny
Paxton’s office sued over allegations that apps run by Temu and parent PDD Holdings sought excessive device permissions. Temu rejected those claims throughout the case.
Lawsuits in several other states target Temu over cybersecurity risks and server links to China. Texas is the first to extract financial penalties and binding operating commitments.
Outstanding state dockets
Multiple state-level lawsuits remain active across the US court system. PDD Holdings still faces enforcement inquiries elsewhere, with attorneys general weighing similar data restrictions, vendor safety rules, and compliance penalties.