Texas sues Meta over WhatsApp encryption

Texas sued Meta Platforms and WhatsApp this week, accusing the companies of misleading users for years about whether private messages on WhatsApp were truly protected by end-to-end encryption. The lawsuit, filed by Texas Attorney General Ken Paxton on May 21 in Harrison County district court, alleges that WhatsApp told users “not even WhatsApp” could read their messages while maintaining internal systems that allowed employee and contractor access in some circumstances. (msn.com) The filing matters because it does not challenge encryption as a concept. (techtimes.com) It challenges the gap Texas says existed between WhatsApp’s marketing claims and the way message access worked in practice, according to the complaint described in Reuters and other reports. Meta has called the allegations false. ### What exactly is Texas accusing Meta and WhatsApp of? Texas says Meta and WhatsApp violated the Texas Deceptive Trade Practices Act by overstating the privacy users received on WhatsApp. The complaint alleges the companies spent years assuring users that only senders and recipients could read messages, while internal processes allowed some private content to be reviewed by employees and outside contractors. (msn.com) The filing, as described by TechTimes and Ars Technica, points to a tiered internal “task” system and cites whistleblower accounts and a Commerce Department investigation referenced in the complaint. Texas argues those allegations contradict WhatsApp’s core public promise that message content was inaccessible to the company itself. (msn.com) ### What does WhatsApp publicly say about encryption? WhatsApp and Meta have long said WhatsApp messages are end-to-end encrypted by default. In a 2021 Meta post announcing encrypted backups, the company said end-to-end encryption protected more than 100 billion messages a day and said neither WhatsApp nor the backup provider could read encrypted backups when that optional feature was enabled. (msn.com) Meta has also described WhatsApp as its default end-to-end encrypted messaging product in broader policy documents. In a human-rights assessment commissioned by Meta, the company said WhatsApp is end-to-end encrypted by default, distinct from Messenger and Instagram direct messages at the time. ### Is Texas saying the encryption protocol itself was fake? (techtimes.com) The lawsuit, based on the reporting now available, appears to focus less on the cryptographic protocol and more on whether users were misled about the total privacy of their communications. Reuters reported the case as a suit over the “strength and scope” of WhatsApp’s encryption measures, while Meta has responded by saying WhatsApp has used end-to-end encryption based on the Signal protocol for more than a decade. (about.fb.com) That distinction matters to the dispute. A service can use end-to-end encryption for messages in transit and still face questions about backups, reporting tools, device-side access, or internal review systems if consumer messaging suggests no one at the company can ever see message content. Texas is alleging that WhatsApp’s public claims went further than its actual practices allowed, according to the complaint summaries. (about.fb.com) ### Why did Pavel Durov enter the story? Pavel Durov, the founder of Telegram, seized on the lawsuit after it was filed. TechTimes reported that Durov said on May 23 that WhatsApp’s encryption was “a giant fraud” and urged users to switch platforms. (msn.com) Durov is not a neutral observer. Telegram competes directly with WhatsApp, and his criticism came as part of a broader public rivalry over privacy and security claims in messaging apps. His comments amplified the case, but the legal issue itself is the Texas complaint and Meta’s response to it. ### What happens next? Meta has denied the allegations, calling them “categorically false and absurd,” according to TechTimes’ account of the company’s response. (techtimes.com) The case now moves into Texas state court, where Meta and WhatsApp can contest the complaint’s factual claims and legal theory. The next concrete step is the court process in Harrison County, where filings from Texas, Meta and WhatsApp should set out the disputed facts in more detail. (techtimes.com) Any answer from Meta, motions to dismiss, or requests for evidence will be the documents to watch.