TDPSA
Texas Data Privacy and Security Act (TDPSA)
Texas · Tex. Bus. & Com. Code ch. 541 (HB 4, 2023)
- Status
- In effect
- Took effect
- July 1, 2024
- Applies to
- Businesses processing personal data in Texas above small-business thresholds (except small businesses, with limited exceptions)
- Enforced by
- Texas Attorney General (exclusive)
Texans can access, correct, delete, and obtain copies of personal data held by covered businesses, and can opt out of targeted advertising, data sales, and profiling used for decisions with significant effects (like jobs, housing, or credit). Businesses must get consent for sensitive data, including biometrics.
Who is protected: Texas residents acting in an individual (non-employment) context
Legal detail
Tex. Bus. & Com. Code ch. 541 grants consumer rights including opt-out of 'profiling in furtherance of a decision that produces a legal or similarly significant effect,' with AG-exclusive enforcement and a 30-day cure period.
Key facts
| Jurisdiction | Texas |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | June 18, 2023 |
| Citation | Tex. Bus. & Com. Code ch. 541 (HB 4, 2023) |
| Private right of action | No, agency enforcement only |
| Penalties | Up to $7,500 per violation |
| Topics | consumer data privacy · data retention · automated decision-making · consumer protection |
| Bill text | Texas Legislature Online: HB 4 (88R) — Texas Data Privacy and Security Act |
More AI rules in Texas
- TX TDI Bulletin B-0003-26 (AI in insurance) · In effect
- Texas Gov. Abbott data center grid-connection audit freeze · In effect
- Texas HB 3512 government AI training mandate (2025) · In effect
- Texas TWDB data center water reporting penalties (2026) · In effect
- Texas Abbott halt on state funding for Flock cameras (2026) · In effect
- Texas AG data center water-reporting investigation (2026) · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare companies · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.