Resource
Guide checklists
An index of the checklist and implementation sections inside the finished Guides, from breach response and opt-out signals to retention, classification, and vendor diligence.
- Breach response steps checklist
The ordered breach response steps: triage, containment, preservation, investigation, notice, and recovery. - Sequenced checklist
The Texas notification sequence: determine who counts as affected, notify affected individuals within 60 days of determination, and notify the Attorney General within 30 days for breaches affecting at least 250 Texas residents. - Opt-Out-Signal Implementation Checklist
Recognizing universal opt-out signals under the TDPSA's conditions, with the response and appeal workflow for consumer rights requests. - Preservation and Response Workflow
Responding to a civil investigative demand: preservation duties, the response workflow, and scope negotiation. - Ninety-day governance playbook
A ninety-day plan for standing up data governance roles, decision rights, and approvals. - Governance-evidence checklist
The evidence that governance decisions, approvals, escalations, and exceptions were actually made and recorded. - Inventory checklist
Building the data inventory and catalog that assessment, notice, and rights duties depend on. - Classification checklist
Classifying data and concentrating protection on the highest-risk holdings. - Retention checklist
Retention decisions across the data lifecycle, supporting minimization, purpose limitation, and disposal. - Retention, hold, and deletion decision flow; disposal checklist
When a legal hold interrupts the retention schedule, and how to document defensible deletion once the hold releases. - Vendor-review checklist
Reviewing processors and vendors: the required TDPSA contract terms and the diligence evidence that supports them. - Data-deal checklist
Diligence for data licenses and transactions that treat data as an asset.