AI Regulation Tracker / Enforcement and litigation
Texas's $1.375 Billion Google Settlement Puts a Price on Biometric AI Misuse
Announced in principle on May 9, 2025 and finalized when Google signed on October 31, 2025, this is the largest privacy recovery any single state has ever obtained against Google. It resolves claims over Google capturing Texans' voiceprints and facial geometry through AI-driven products, along with incognito and geolocation tracking. For US counsel, it is hard proof that biometric-AI liability is now billion-dollar exposure.
Texas has closed the books on one of the largest privacy cases any state has ever brought against a technology company. On May 9, 2025, Attorney General Ken Paxton announced a $1.375 billion settlement in principle with Google, and on October 31, 2025 his office confirmed that Google had signed the final agreement. The case goes back to 2022, when Texas sued Google for what the state described as unlawfully tracking and collecting users' private data across three fronts: geolocation, incognito searches, and biometric data. The number matters because of how far it clears the field. Paxton's office noted that no other state has settled a similar privacy case with Google for more than $93 million, and that a forty-state coalition recovered $391 million combined. Texas alone took $1.375 billion.
What makes this a story for anyone building AI features, not just a Texas enforcement headline, is the biometric core of it. In announcing the deal, Paxton was direct about what Google was accused of collecting. In his words, "For years, Google secretly tracked people's movements, private searches, and even their voiceprints and facial geometry through their products and services. I fought back and won." Voiceprints and facial geometry are not incidental metadata. They are biometric identifiers generated by AI-driven systems, and the underlying 2022 petition tied them to consumer products like Google Photos, Google Assistant, and the Nest Hub Max, the kinds of face-scanning and voice-recognition features that are now standard in the market.
The statute doing the work is the same one that cost Meta $1.4 billion
The biometric claims here rest on Texas's Capture or Use of Biometric Identifier Act, usually shortened to CUBI. It is worth naming because it is the same statute that produced the state's $1.4 billion settlement with Meta over facial-recognition data, which Paxton's office has repeatedly called the largest settlement ever obtained from an action brought by a single state. Put the two together and a pattern is impossible to miss. Within a short span, one state used one biometric-privacy law to extract more than $2.7 billion from two of the largest technology companies in the world, in both cases over AI systems that capture faces and voices. CUBI is a state law, so it binds conduct connected to Texas, but the size of these recoveries is exactly what makes other state attorneys general and plaintiffs' firms pay attention to biometric statutes generally, Illinois's BIPA being the obvious cousin.
Read the status precisely
Be exact about what this is and is not. It is a signed, finalized settlement, so it is binding on the parties and the money is real. It is not a court ruling that sets precedent, and Google did not concede a broad legal principle by settling. So no one should say a court has now held that voiceprints or face geometry are illegal to collect. That is not what happened. What happened is that a state extracted the largest privacy payment in its history rather than let the claims go to trial, and it did so on a theory built substantially around AI-generated biometric identifiers. The signal is about exposure and appetite, not about a new binding rule. For working professionals, exposure and appetite are usually the more useful signal anyway, because they tell you where the money and the enforcement attention are going.
Why this matters even though it does not bind you
A settlement in another party's case still moves the risk picture. When Paxton finalized the deal, he framed it as a warning shot. "This historic $1.375 billion price tag for Google's misconduct sends a clear warning to all of Big Tech that I will take aggressive action against any company that misuses Texans' data and violates their privacy," he said. Read that as a stated enforcement posture, not just rhetoric. Two nine-and-ten-figure biometric settlements in short order tell every general counsel that a face-scanning or voice-capture feature is no longer a low-stakes product decision. It is a line item that can carry catastrophic liability if the consent and disclosure around it are weak. The dollar figures are what change the internal conversation, because they are large enough that a board understands them without a lawyer translating.
What this means for US professionals
If your company ships anything that captures a biometric identifier, the practical work is consent and documentation, done before launch rather than during discovery. Under statutes like CUBI and Illinois's BIPA, the recurring failures are the same: capturing a voiceprint or a face scan without clear, informed consent, retaining it without a published schedule, or using it beyond what the user was told. For counsel, treat this settlement as a costing exhibit. When product teams propose a facial-recognition or voice-recognition feature, the Google and Meta numbers are the concrete answer to the question of what the downside looks like if consent is handled poorly. For privacy and compliance leads, inventory where in your stack you generate biometric identifiers, confirm each one has a documented legal basis and a retention limit, and make sure incognito or private modes actually behave the way you tell users they do, since geolocation and incognito tracking were part of what Texas went after here alongside the biometrics. None of this is compelled by the Texas settlement. All of it is a great deal cheaper than being the next headline.
Questions professionals are asking
What did Texas accuse Google of doing?
Texas alleged Google unlawfully tracked and collected users' private data across geolocation, incognito searches, and biometric data. The biometric piece covered voiceprints and records of face geometry captured through Google's products, which the state brought under its Capture or Use of Biometric Identifier Act (CUBI).
Is this a court ruling that sets precedent?
No. It is a signed, finalized settlement, announced in principle on May 9, 2025 and signed by Google on October 31, 2025. It binds the parties and the $1.375 billion is real, but Google conceded no broad legal principle, so it does not create binding precedent that face or voice capture is unlawful.
How big is $1.375 billion compared with other cases?
It is the largest privacy recovery any single state has obtained against Google. Texas's office noted the next-largest single-state settlement is $93 million, and a forty-state coalition recovered $391 million combined. It follows the state's separate $1.4 billion biometric settlement with Meta.
Does CUBI apply to my company?
CUBI is a Texas statute, so it reaches biometric capture connected to Texas. But the size of these settlements is why biometric-privacy laws generally, including Illinois's BIPA, are drawing enforcement and plaintiff attention. Any company capturing voiceprints or face scans should assume biometric consent and retention rules apply somewhere it operates.
What should US counsel and compliance teams do now?
Treat the settlement as a costing benchmark for biometric-AI features. Inventory where your systems generate biometric identifiers, confirm each has documented informed consent and a retention limit, use biometric data only as disclosed, and make sure private or incognito modes behave as advertised. Do this before launch, not during discovery.
RELATED BRIEFINGS
- Browse the full AI Regulation Tracker
- Texas OAG: Paxton finalizes $1.375 billion Google settlement (primary source)
- Texas OAG: original announcement of the settlement in principle (May 9, 2025)
- Argentina's AAIP treats facial recognition as sensitive biometric data
- UK ICO and the Clearview facial-recognition jurisdiction fight
Browse the full AI Regulation News tracker
Informational analysis for working professionals, not legal advice. Confirm how any settlement or biometric statute applies to your situation with qualified counsel in the relevant jurisdiction.