Chinese-owned online shopping platform Temu has agreed to pay $3 million to the American state of Texas and introduce stricter data privacy and product safety measures to settle a lawsuit alleging improper handling of consumers’ personal information.
The agreement, announced on Friday, October 16, 2026, requires the e-commerce company to store Texas customers’ personal information on servers located in the United States and restrict access to that information from China.
Texas Attorney General Ken Paxton said the settlement represented a significant step towards protecting consumers from unlawful data collection and potentially dangerous products sold through online marketplaces.
The lawsuit, filed in February 2026 against Temu’s parent company, PDD Holdings, and its operating subsidiary, WhaleCo, accused the platform of collecting sensitive personal information without adequate safeguards and potentially exposing users to unauthorised access.
Temu denied the allegations and did not admit wrongdoing under the settlement. The company said it had reached an agreement with Texas authorities while maintaining its commitment to serving customers and businesses.
Under the agreement, Temu must strengthen its data security systems and limit the transfer of customer information to China, allowing access only where necessary for legitimate business activities, including processing and delivering orders.
The settlement also introduces financial consequences for future violations. Texas authorities said the company could face penalties of $8 million for each year it breaches specified data security requirements.
Beyond data protection, Temu must conduct annual independent product safety testing to identify potentially dangerous chemicals and materials in goods sold through its platform.
Where testing confirms that products contain hazardous substances, Temu must remove the affected merchandise, terminate the responsible seller and affiliated stores, notify affected consumers in Texas and provide full refunds.
The measures particularly address concerns about clothing, children’s products, household goods and other merchandise that may contain substances harmful to consumers.
Texas is the first American state to settle such data privacy allegations against Temu, although the company faces similar legal challenges in other parts of the United States.
The settlement has particular relevance for Nigeria, where the Nigeria Data Protection Commission (NDPC) announced an investigation into Temu’s handling of personal information in February 2026.
The commission said the investigation was prompted by concerns involving online surveillance, transparency, accountability, data minimisation and the transfer of personal information across international borders.
At the time, the NDPC disclosed that preliminary findings indicated Temu processed the personal information of approximately 12.7 million Nigerians.
The commission’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, directed an investigation to determine whether the company’s activities complied with the Nigeria Data Protection Act 2023.
Temu subsequently acknowledged the Nigerian regulator’s inquiry and expressed its willingness to cooperate with authorities while maintaining that protecting users’ personal information remained a priority.
However, no final determination or enforcement decision concerning the Nigerian investigation was independently established from the information available as of October 20.
The Texas agreement does not apply automatically to Temu’s operations in Nigeria. Any comparable restrictions or penalties would depend on Nigerian law, the regulator’s findings and the outcome of any enforcement proceedings.
The American settlement nevertheless demonstrates the growing regulatory pressure facing international e-commerce platforms as governments demand greater accountability over consumer data and product safety.
For Nigeria, the development raises further questions about how overseas digital marketplaces collect, process, store and transfer personal information belonging to millions of consumers.
