Texas Data Privacy and Security Act (TDPSA)
Texas · Tex. Bus. & Com. Code ch. 541 (HB 4, 2023)
Texans can access, correct, delete, and obtain copies of personal data held by covered businesses, and can opt out of targeted advertising, data sales, and profiling used for decisions with significant effects (like jobs, housing, or credit). Businesses must get consent for sensitive data, including biometrics.
Technical detail
Tex. Bus. & Com. Code ch. 541 grants consumer rights including opt-out of 'profiling in furtherance of a decision that produces a legal or similarly significant effect,' with AG-exclusive enforcement and a 30-day cure period.
Who is protected: Texas residents acting in an individual (non-employment) context
Who must comply: Businesses processing personal data in Texas above small-business thresholds (except small businesses, with limited exceptions)
Key facts
| Jurisdiction | Texas |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2024-07-01 |
| Enacted | 2023-06-18 |
| Citation | Tex. Bus. & Com. Code ch. 541 (HB 4, 2023) |
| Enforced by | Texas Attorney General (exclusive) |
| Private right of action | No — agency enforcement only |
| Penalties | Up to $7,500 per violation |
| Topics | consumer data privacy · data retention · automated decision-making · consumer protection |
| Last verified | 2026-07-21 |
| Official source | Texas Legislature Online: HB 4 (88R) — Texas Data Privacy and Security Act ↗ |
More AI rules in Texas
- TX TDI Bulletin B-0003-26 (AI in insurance) · In effect
- Texas Gov. Abbott data center grid-connection audit freeze · In effect
- Texas SB 6 (Data Center Grid Law) · In effect
- TX SB 2205 (2017 AV statute) · In effect
- TX HB 912 (2013 drone privacy) · In effect
- TX HB 2700 — AI/Altered CSAM · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.