HELENA – Montana Attorney General Austin Knudsen led a coalition of 21 attorneys general in demanding answers from online retailer Temu regarding their alleged ties with the Chinese Communist Party (CCP), data collection and sharing practices, and possible violations of the Uyghur Forced Labor Prevention Act (UFLPA).

“Temu’s business practices and apparent ties to the Chinese Communist Party are deeply concerning. As attorney general, it’s my job to protect Montanans from bad actors who may be coming after their sensitive consumer data and hold anyone who has violated our consumer protection laws accountable,” Attorney General Knudsen said. “I look forward to hearing from the company to ensure their business practices are in line with Montana law and data is not being shared with the CCP.”

In a letter sent Thursday to the president of Temu and the CEO of PPD Holdings Inc., Temu’s parent company, Attorney General Knudsen outlined his concerns with the company’s business practices following reports that the company may not be following federal law or Montana’s consumer protection laws.

Last year, the United States House Select Committee on the Chinese Communist Party revealed disturbing information about Temu’s failure to comply with American laws prohibiting the use of forced labor by Uyghurs. The company admitted that “it does not have a policy in place to prohibit the sale of goods from Xinjiang – the location of the CCP’s ongoing genocide against the Uyghurs.” And then took it a step further and claimed it is not subject to the UFLPA.

The same house select committee also found that Temu has no real compliance system and concluded “that shipments from Temu containing products made with forced labor are entering the United States on a regular basis, in violation of the UFLPA.”

Additionally, the company’s actions may disregard the Montana Consumer Data Privacy Act, which  goes into effect October 1. “Montana has additional concerns about Temu’s and PDD Holding’s data collection practices. Like other companies subject to CCP control, Montana believes that Temu is obligated to collect and send Montana consumer data to the CCP on demand,” Attorney General Knudsen wrote.

Attorney General Knudsen is asking Temu to answer the following questions within the next 30 days:

1. Does Temu or PDD Holdings collect U.S. consumer data?  If so, please explain the type of data collected from U.S. consumers, including but not limited to data regarding consumer preferences, biometric data, political leanings, health data, race, religion, or sex.  Please explain the rationale for the different types of data collected and the manner in which you notify consumers of the type of data collected.
2. How is U.S. consumer data retained and stored?  Please provide documentation of Temu’s or PDD Holdings’ cybersecurity and data retention and storage policies for U.S. consumer data.  What security measures are in place to prevent unauthorized third parties from accessing U.S. consumer data acquired or retained by Temu?
3. Has the CCP, or any of its officials, members, or affiliates, required or requested that Temu or PDD Holdings turn over any data collected on U.S. citizens?  If so, please state how many directives or requests you received and explain what data was requested and whether any (or all) data was turned over to the CCP.
4. What consumer data does Temu or PDD Holdings retain when an individual consumer requests their data be deleted, or their account deactivated?
5. Does Temu or PDD Holdings sell U.S. consumer data?  If so, who does Temu or PDD Holdings sell that consumer data to, and are any measures employed to safeguard the identities of U.S. consumers?  What percentage of profits are attributable to retail sales, and what percentage of profits are attributable to data sold to third parties?
6. Various reports indicate that several former CCP members are on PDD Holdings’ executive leadership team.  Do these members have access to any U.S. consumer data possessed or acquired by Temu?  If so, please explain the nature of the members’ access to that data.
7. How does Temu certify that the products sold on its platform are not produced by slave labor?
8. Please identify all measures Temu has taken in the past and any measures currently being employed, including but not limited to any internal or external audits, or any rules and guidelines imposed on third party vendors or suppliers.
9. How does Temu warrant to consumers that products sold on its platform do not involve the use of slave labor?
10. CNN reports that Temu’s sister app (Pinduoduo), also owned by PDD Holdings, was removed from Google Play in 2023 after experts discovered malware that could be used to spy on users. Did the same app developer create the Temu app? Please explain in detail all measures Temu has taken in the past and any measures currently being employed to ensure the app is free of malware or any other programs that would allow Temu or anyone else to spy on U.S. users.
11. What steps does Temu or PDD Holdings take to notify consumers that products sold on its platform are subject to safety recalls?  What steps does Temu or PDD Holdings take to warrant to consumers the safety of products sold on its platforms?

Attorneys general from Alabama, Alaska, Florida, Georgia, Idaho, Indiana, Iowa, Kansas, Louisiana, Mississippi, Missouri, Nebraska, New Hampshire, North Dakota, Oklahoma, South Carolina, South Dakota, Tennessee, Virginia, and West Virginia also joined the letter.

Click here to read the letter.