Regulations › US states › Texas
TDPSA
Texas Data Privacy and Security Act
WhenIn effect since 1 July 2024
Who enforces itTexas Attorney General
Who it applies toBusinesses that do business in Texas or produce products or services Texas residents use, and process or sell personal data, unless they are small businesses as defined by the US Small Business Administration. Small businesses may still not sell sensitive data without consent.
ThresholdsAny business in Texas that processes or sells personal data and is not an SBA-defined small bu…
Universal opt-outMust honor browser or device global opt-out signals for targeted ads and sales since January 1…
Cure periodPermanent 30-day cure period after AG notice, with a written cure statement
Request deadline45 days, extendable once by 45 days with notice
Maximum penaltyUp to $7,500 per violation, plus attorney fees and investigation costs
Private actionNo private right of action
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws