Texas Data Law
Start here
Texas Data Law explains data, privacy, and information-governance law for Texas organizations. Find a Guide, look up an authority or term, or follow a statute, enforcement matter, or case.
Texas Data Law explains the laws and practical decisions that govern information. Start with a question, browse a topic, consult a Guide, or follow developments through the Tracker. Resources connect legal requirements with the systems, records, and decisions needed to apply them.
Start With a Question
Legal coverage
- Does the TDPSA apply without a revenue threshold, and who is exempt? See also: TDPSA Duties and Data Protection Assessments, Texas Data Brokers and Their Supply Chains
- Which rights does the TDPSA give consumers, and how does a company handle their requests? See also: TDPSA Duties and Data Protection Assessments
- When is sensitive-data consent required? See also: Which Data Laws Apply to a Texas Organization, TDPSA Duties and Data Protection Assessments
- Which privacy notices must a Texas business publish, and how must it handle opt-out signals? See also: Consumer Rights Requests and Opt-Out Signals
- Which other-state privacy laws reach a Texas business? See also: Which Data Laws Apply to a Texas Organization, TDPSA Duties and Data Protection Assessments
Compliance programs
- How should a company determine what information it holds? See also: Data Governance Roles and Decision Rights, Quality, Lineage, Provenance, and Master Data
- Which records should be retained, archived, or deleted?
- What changes when a vendor uses data for its own purposes? See also: TDPSA Duties and Data Protection Assessments, Vendor Exit, Portability, and Migration
- What must a Texas business do before sharing data with a foreign vendor or a country of concern? See also: Federal Privacy, the State Patchwork, and California, EU, UK, and International Data Transfers
Incidents and response
- When does a security incident trigger Texas notice? See also: Federal and Multistate Breach Duties, Incident Response, Ransomware, and Recovery
- What does an Attorney General investigation require a company to preserve? See also: Privacy Representations and the DTPA, Privacy Litigation: Standing, Class Actions, and Arbitration
Disputes and enforcement
- How can a privacy or encryption promise create litigation risk? See also: Attorney General Enforcement and Investigations, Privacy Notices, Consent, and Loyalty Programs
Children and age assurance
- Which rules govern children and age checks? See also: COPPA and Children Under Thirteen, SCOPE, App Stores, and Known Minors, Age Assurance and Children by Design
Health and sensitive data
Guides
Guides explain the law and its practical implications as finished articles.
45 guides across nine topic hubs.
Browse all GuidesTopics
Topics organize related subjects so readers can work across guides, tracker records, and resources on one subject.
Texas Privacy Statutes
Texas has no single privacy code; obligations arrive from several statutes that must be read separately.
Enforcement and Litigation
Privacy duties become real in enforcement and litigation, and Texas is an active forum.
Children, Teens, and Age Verification
Protecting young users in Texas means navigating several statutes with different age lines, different regulated parties, and different litigation postures.
Sensitive and Sector Data
Sensitive information is not one category.
Security, Incidents, and Breach Response
Security law has four movements that must not be blurred: the preventive duties to protect information, the incident-response sequence when protection fails, the breach-notification duties that follow, and the litigation consequences of each.
Data Governance and the Information Lifecycle
Governance turns legal duties into working systems.
Vendors, Data Sharing, and Transactions
Data rarely stays where it was collected.
Federal, Multistate, and Cross-Border Rules
Texas organizations operate under more than Texas law.
Government Data, Records, and Access
Government information plays by different rules: the public's right of access under the Public Information Act, the records-retention duties set by the applicable retention schedules (which set mandatory minimum periods, include permanent retention for some records, and authorize disposal only under the records program and its restrictions; litigation, audits, claims, and current public-information requests can block destruction, and state-agency and local-government schedules are not interchangeable), the security programs that protect government systems, the vendor requirements that flow down to contractors, and the legal process by which government-held data is obtained or withheld.
Tracker
The Tracker follows statutes, regulations, litigation, and enforcement developments as individual records.
112 records of statutes, rules, enforcement matters, and court decisions. Browse the Tracker, the Texas Attorney General docket, the 2027 legislative session view, or the compliance deadlines.
Definitions
Definitions explain legal and operational terminology, with regime-specific meanings kept separate.
50 legal and operational terms. Browse Definitions.
Resources
Resources provide working reference materials: charts, calendars, and toolkits.
Reference materials and working tools. Browse Resources.
Insights
Analysis of developments and emerging questions.
- What the Texas Cybersecurity Safe Harbor Requires a Business to Prove
- Texas Data Broker Law Now Sits in Business and Commerce Code Chapter 510
- Driving-Data Allegations Show How an SDK Can Feed a Data Supply Chain
- What the Texas Google Settlement Actually Resolved
- Texas Health Records and Foreign Cloud Access
- The COPPA Rule and the Separate Age Verification Policy
- SCOPE and App Stores Have Different Litigation Histories
- California’s New Privacy Regulations Took Effect Before Their Staged Compliance Dates
Texas Data, Privacy & AI
Spotlight articles on the data, privacy, and AI questions Texas organizations face now, complementing the Guides and the companion Texas AI Law publication.