Authorities
Statutes
The laws the guides interpret, Texas first, then federal, then other states and the EU/UK. Each entry links to its tracker record.
| Record | Jurisdiction | Status | Subject |
|---|---|---|---|
| Texas App Store Accountability Act (SB 2420) Texas · Statute |
Texas | Enforceable while the stay pending appeal remains in force; the cited record establishes no merits decision. | Children |
| Texas SCOPE Act (HB 18) Texas · Statute |
Texas | In effect subject to the preliminary injunction of §§509.053 and 509.056(1); other challenged provisions have the separate outcomes described above. | Children |
| Texas age-verification law for adult content (HB 1181) Texas · Statute |
Texas | Age-verification requirement upheld; the Supreme Court did not decide the separate health-warning provisions. | Children |
| Texas Data Privacy and Security Act Texas · Statute |
Texas | In effect; amended by <a href="https://capitol.texas.gov/tlodocs/89R/billtext/pdf/HB00149F.pdf">HB 149</a>, effective January 1, 2026 (§541.104(a)(2)) | Privacy statutes; Enforcement |
| TDPSA universal opt-out provisions Texas · Statute |
Texas | In effect (operative January 1, 2025, six months after the Act took effect; §541.055(e)) | Privacy statutes |
| Capture or Use of Biometric Identifier Act Texas · Statute |
Texas | In effect | Privacy statutes; Sensitive data |
| Texas data broker law Texas · Statute |
Texas | In effect (Amended by SB 2121 and SB 1343 (2025); renumbered by HB 1620) | Privacy statutes |
| Texas Identity Theft Enforcement and Protection Act Texas · Statute |
Texas | In effect (Pinpoints: §521.052 security and disposal; §521.151 penalties) | Security; Privacy statutes |
| Texas breach notification duties Texas · Statute |
Texas | In effect: individuals within 60 days; Attorney General within 30 days when 250 or more Texans are affected | Security |
| Texas Medical Records Privacy Act Texas · Statute |
Texas | In effect | Sensitive data; Privacy statutes |
| Texas electronic health record law and SB 1188 Texas · Statute |
Texas | In effect (SB 1188, effective September 1, 2025; U.S.-storage rule applies from January 1, 2026; §§183.002, 183.011) | Sensitive data; Cross-border |
| Texas Genomic Act of 2025 (HB 130) Texas · Statute |
Texas | In effect (HB 130, effective September 1, 2025; §174.006 bankruptcy sale, §174.008 certification, §174.011 private action) | Sensitive data |
| Texas Deceptive Trade Practices Act Texas · Statute |
Texas | In effect (Pinpoints §17.46(b) (deceptive acts list) and §17.61 (civil investigative demands, construed in OAG v. PFLAG, Tex. 2026)) | Privacy statutes; Enforcement |
| Texas interception and recording law Texas · Statute |
Texas | In effect | Privacy statutes; Enforcement |
| Texas telemarketing and text-message law Texas · Statute |
Texas | In effect | Vendors |
| Texas government AI and data management (SB 1964) Texas · Statute |
Texas | In effect (SB 1964, effective September 1, 2025) | Government data |
| Texas Cyber Command (HB 150) Texas · Statute |
Texas | In effect; transition under way (HB 150, effective September 1, 2025; DIR functions transfer by December 31, 2026) | Government data; Security |
| Texas government cyber training and reporting Texas · Statute |
Texas | In effect | Government data |
| Texas government information confidentiality (HB 3112) Texas · Statute |
Texas | In effect (HB 3112, 2025; took effect immediately on passage) | Government data |
| Texas Public Information Act: privacy and cyber exceptions Texas · Statute |
Texas | In effect (see also §552.1391, the cybersecurity information exception added by HB 3112) | Government data |
| Texas records retention authority and schedules Texas · Statute |
Texas | In effect | Government data; Governance |
| Texas student-data protections and school-vendor requirements Texas · Statute |
Texas | In effect | Sensitive data |
| Texas insurance data regulation Texas · Statute |
Texas | In effect | Sensitive data |
| Texas government data and contracting Texas · Statute |
Texas | In effect | Government data |
| Texas Social Security number and identity-data rules Texas · Statute |
Texas | In effect | Sensitive data |
| FTC Act Section 5: privacy and security enforcement Federal · Statute |
Federal | In effect (GM/OnStar final order issued January 13, 2026; announced January 14, 2026) | Cross-border; Enforcement |
| FERPA and school disclosure regulations Federal · Statute |
Federal | In effect | Sensitive data; Cross-border |
| FCRA consumer-reporting data duties Federal · Statute |
Federal | In effect | Sensitive data; Cross-border |
| Computer Fraud and Abuse Act and controlling access opinions Federal · Statute |
Federal | In effect (Van Buren decided June 3, 2021) | Cross-border; Security |
| PADFAA and FTC broker enforcement materials Federal · Statute |
Federal | In effect; FTC enforces; no volume threshold; China, Russia, Iran, and North Korea are the foreign adversary countries (Enacted April 24, 2024; effective June 23, 2024) | Cross-border |
| CFIUS review of sensitive-personal-data transactions Federal · Statute |
Federal | In effect; covers certain noncontrolling investments in TID U.S. businesses, including those holding sensitive personal data | Cross-border; Vendors |
| TAKE IT DOWN Act (2025) Federal · Statute |
Federal | In effect (signed May 19, 2025; platform notice-and-removal duties apply from May 19, 2026) | Children; Cross-border |
| Electronic Communications Privacy Act Federal · Statute |
Federal | In effect | Cross-border; Government data |
| Stored Communications Act Federal · Statute |
Federal | In effect | Cross-border; Government data |
| CLOUD Act Federal · Statute |
Federal | In effect | Cross-border; Government data |
| Telephone Consumer Protection Act Federal · Statute |
Federal | TCPA rules in effect; FCC 26-67 amendments effective November 25, 2026. | Vendors; Cross-border |
| CAN-SPAM Act Federal · Statute |
Federal | In effect (Civil penalty up to $53,088 per email) | Vendors; Cross-border |
| Video Privacy Protection Act Federal · Statute |
Federal | In effect | Vendors; Cross-border |
| Restore Online Shoppers' Confidence Act Federal · Statute |
Federal | In effect | Vendors |
| Federal preemption watch Federal · Bill |
Federal | Pending bill; proposed preemption is not operative law. | Cross-border |
| California CCPA and CPRA California · Statute |
California | In effect (Amended regulations approved September 22, 2025, effective January 1, 2026) | Cross-border; Privacy statutes |
| California Delete Act and DROP requirements California · Statute |
California | In effect; DROP processing duty in force (DROP opened to consumers January 1, 2026; brokers must process DROP requests from August 1, 2026, checking at least every 45 days) | Cross-border; Privacy statutes |
| Colorado Privacy Act Other states · Statute |
Other states | In effect (July 1, 2023) | Cross-border |
| Connecticut Data Privacy Act Other states · Statute |
Other states | In effect as amended (July 1, 2023. SB 1295 amendments effective July 1, 2026 (35,000-consumer threshold, revenue test removed, narrower GLBA exemption). SB 4, signed May 27, 2026 and further amended by cleanup bills adopted June 2 and June 4, 2026: CTDPA amendments (ban on selling precise geolocation, narrower publicly available information exclusion, expanded deletion rights) effective October 1, 2026; data broker registration effective January 1, 2027; surveillance-pricing requirements effective July 1, 2027; centralized broker deletion mechanism due July 1, 2028) | Cross-border |
| Virginia Consumer Data Protection Act Other states · Statute |
Other states | In effect (January 1, 2023; amendments effective January 1, 2026 (§59.1-575 definitions, new §59.1-577.1)) | Cross-border |
| State privacy law patchwork Multistate · Statute |
Multistate | Mixed by state. Louisiana SB 386, signed May 29, 2026, applies January 1, 2027; other laws have their own dates. | Cross-border; Privacy statutes |
| Illinois BIPA amendments and controlling decisions Illinois · Statute |
Illinois | In effect (Amendment signed and effective August 2, 2024: repeated collection from the same person by the same method is one violation; electronic signatures valid for consent. The Seventh Circuit has held the amendment applies to pending cases) | Cross-border; Sensitive data; Enforcement |
| Washington My Health My Data Act Washington · Statute |
Washington | In effect (Geofencing prohibition effective July 22, 2023; main provisions effective March 31, 2024 (small businesses June 30, 2024)) | Cross-border; Sensitive data |
| Nevada consumer health-data law Nevada · Statute |
Nevada | In effect (March 31, 2024) | Cross-border; Sensitive data |
| EU GDPR and territorial-scope authorities EU · EU regulation |
EU | In effect (Applies from May 25, 2018) | Cross-border |
| UK GDPR UK · UK statute |
UK | In effect as amended (Main data protection amendments commenced February 5, 2026) | Cross-border |
| UK Data (Use and Access) Act 2025 UK · Legislation |
UK | In force in stages (Royal Assent June 19, 2025; stage 1 August 20, 2025; Part 5 data protection provisions February 5, 2026; complaints provisions (s. 103) commenced June 19, 2026, from which controllers must operate a compliant data-protection complaints process under ICO guidance (final guidance February 12, 2026, updated May 8, 2026). Under regulation 7 of S.I. 2026/82, the acknowledgment and response duties in DPA 2018 section 164A(3) and (4) apply only to complaints received by the controller on or after June 19, 2026.) | Cross-border |
| Texas cybersecurity safe harbor (SB 2610) Texas · Statute |
Texas | In effect | Security |
| California SB 690 (CIPA reform) California · Statute |
California | Enacted, not yet operative (Signed September 30, 2026 (Chapter 976, Statutes of 2026); operative January 1, 2027) | Cross-border |
| Louisiana Data Privacy Act (SB 386) Other states · Statute |
Other states | Enacted, not yet effective (Signed May 29, 2026; effective January 1, 2027) | Cross-border |
| No records match. Clear the filters to see all records. | |||