Texas Data Privacy and Security Act - Revision history

SomebodyThatMayContribute: Convert citation 4 to use cite web template.

2026-04-25T05:38:20Z

Convert citation 4 to use cite web template.

← Older revision		Revision as of 05:38, 25 April 2026
Line 34:		Line 34:
	==Enforcement==		==Enforcement==

	The Texas Attorney General holds exclusive enforcement authority under the TDPSA. Entities found to be in violation are subject to civil penalties of up to $7,500 per violation. Prior to enforcement, the Attorney General may grant a 30-day cure period for organizations to remedy identified violations.<ref>[https://www.consumerprivacyact.com/texas-data-privacy-and-security-act-tdpsa/ Consumer Privacy Act ~~TDPSA overview]~~</ref>		The Texas Attorney General holds exclusive enforcement authority under the TDPSA. Entities found to be in violation are subject to civil penalties of up to $7,500 per violation. Prior to enforcement, the Attorney General may grant a 30-day cure period for organizations to remedy identified violations.<ref>{{Cite web \|title=Texas Data Privacy and Security Act (TDPSA) \|url=https://www.consumerprivacyact.com/texas-data-privacy-and-security-act-tdpsa/ \|url-status=live \|archive-url=https://web.archive.org/web/20260414203132/https://www.consumerprivacyact.com/texas-data-privacy-and-security-act-tdpsa/ \|archive-date=2026-04-14 \|access-date=31 Mar 2026 \|website=Consumer Privacy Act (CPA)}}</ref>

	==References==		==References==

SomebodyThatMayContribute: convert citation 3 to use cite web template (re-archived today as last available is 11 Mar)

2026-04-25T05:31:32Z

convert citation 3 to use cite web template (re-archived today as last available is 11 Mar)

← Older revision		Revision as of 05:31, 25 April 2026
Line 20:		Line 20:

	The TDPSA imposes various obligations on data controllers and processors<ref>{{Cite web \|title=FAQs for Businesses as Texas Data Privacy Law Takes Effect July 1 \|url=https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law \|url-status=live \|archive-url=https://web.archive.org/web/20260425051507/https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law \|archive-date=2026-04-25 \|access-date=31 Mar 2026 \|website=Fisher Phillips LLP}}</ref>		The TDPSA imposes various obligations on data controllers and processors<ref>{{Cite web \|title=FAQs for Businesses as Texas Data Privacy Law Takes Effect July 1 \|url=https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law \|url-status=live \|archive-url=https://web.archive.org/web/20260425051507/https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law \|archive-date=2026-04-25 \|access-date=31 Mar 2026 \|website=Fisher Phillips LLP}}</ref>
	<ref>[https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html Clifford Chance ~~overview]~~</ref>, including:		<ref>{{Cite web \|date=31 Dec 2023 \|title=The Texas Data Privacy Law: An Overview \|url=https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html \|url-status=live \|archive-url=https://web.archive.org/web/20260425052448/https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html \|archive-date=2026-04-25 \|access-date=31 Mar 2026 \|website=Clifford Chance}}</ref>, including:

	*Limiting data collection to what is adequate, relevant, and reasonably necessary for processing purposes.		*Limiting data collection to what is adequate, relevant, and reasonably necessary for processing purposes.

SomebodyThatMayContribute: convert citation 2 to use cite web template (re-archived today as last available is 09 Mar)

2026-04-25T05:18:29Z

convert citation 2 to use cite web template (re-archived today as last available is 09 Mar)

← Older revision		Revision as of 05:18, 25 April 2026
Line 19:		Line 19:
	==Controller and Processor Obligations==		==Controller and Processor Obligations==

	The TDPSA imposes various obligations on data controllers and processors<ref>[https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law Fisher Phillips ~~FAQ]~~</ref>		The TDPSA imposes various obligations on data controllers and processors<ref>{{Cite web \|title=FAQs for Businesses as Texas Data Privacy Law Takes Effect July 1 \|url=https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law \|url-status=live \|archive-url=https://web.archive.org/web/20260425051507/https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law \|archive-date=2026-04-25 \|access-date=31 Mar 2026 \|website=Fisher Phillips LLP}}</ref>
	<ref>[https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html Clifford Chance overview]</ref>, including:		<ref>[https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html Clifford Chance overview]</ref>, including:

SomebodyThatMayContribute: convert citation 1 to use cite web template

2026-04-25T05:00:24Z

convert citation 1 to use cite web template

Sven: Remove Cases section for now

2026-04-25T02:48:42Z

Remove Cases section for now

← Older revision		Revision as of 02:48, 25 April 2026
Line 35:		Line 35:

	The Texas Attorney General holds exclusive enforcement authority under the TDPSA. Entities found to be in violation are subject to civil penalties of up to $7,500 per violation. Prior to enforcement, the Attorney General may grant a 30-day cure period for organizations to remedy identified violations.<ref>[https://www.consumerprivacyact.com/texas-data-privacy-and-security-act-tdpsa/ Consumer Privacy Act TDPSA overview]</ref>		The Texas Attorney General holds exclusive enforcement authority under the TDPSA. Entities found to be in violation are subject to civil penalties of up to $7,500 per violation. Prior to enforcement, the Attorney General may grant a 30-day cure period for organizations to remedy identified violations.<ref>[https://www.consumerprivacyact.com/texas-data-privacy-and-security-act-tdpsa/ Consumer Privacy Act TDPSA overview]</ref>

	~~==Cases==~~
	~~{{Incomplete section}}~~

	==References==		==References==

Mr Pollo at 19:39, 20 April 2026

2026-04-20T19:39:11Z

← Older revision		Revision as of 19:39, 20 April 2026
Line 1:		Line 1:
			{{Incomplete\|Issue 1=needs to use [[Template:Cite web]]}}

	The [https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act Texas Data Privacy and Security Act] ("TDPSA") is a law in the U.S State of Texas that establishes digital privacy rights for Texas state residents and enforces these rights against any company providing services to residents, rather they reside in Texas or not. The law was signed by Governor Greg Abbott on June 18th, 2023, with the majority of the law going into effect on July 1st, 2024, and the universal opt-out mechanisms going into effect January 1st, 2025.		The [https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act Texas Data Privacy and Security Act] ("TDPSA") is a law in the U.S State of Texas that establishes digital privacy rights for Texas state residents and enforces these rights against any company providing services to residents, rather they reside in Texas or not. The law was signed by Governor Greg Abbott on June 18th, 2023, with the majority of the law going into effect on July 1st, 2024, and the universal opt-out mechanisms going into effect January 1st, 2025.

Line 35:		Line 37:

	==Cases==		==Cases==
			{{Incomplete section}}

			==References==
			{{Reflist}}

			[[Category:US legislation]]

Sven: Created page with "The [https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act Texas Data Privacy and Security Act] ("TDPSA") is a law in the U.S State of Texas that establishes digital privacy rights for Texas state residents and enforces these rights against any company providing services to residents, rather they reside in Texas or not. The law was signed by Governor Greg Abbott on June 18th, 2023, wit..."

2026-03-31T02:23:42Z

Created page with "The [https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act Texas Data Privacy and Security Act] ("TDPSA") is a law in the U.S State of Texas that establishes digital privacy rights for Texas state residents and enforces these rights against any company providing services to residents, rather they reside in Texas or not. The law was signed by Governor Greg Abbott on June 18th, 2023, wit..."

New page

The [https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act Texas Data Privacy and Security Act] ("TDPSA") is a law in the U.S State of Texas that establishes digital privacy rights for Texas state residents and enforces these rights against any company providing services to residents, rather they reside in Texas or not. The law was signed by Governor Greg Abbott on June 18th, 2023, with the majority of the law going into effect on July 1st, 2024, and the universal opt-out mechanisms going into effect January 1st, 2025.

==Rights Codified==

The TDPSA codified the following privacy rights for Texas residents<ref>[https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act Texas Attorney General TDPSA page]</ref>:

* '''Right to Access:''' Individuals have the right to confirm whether a controller is processing their personal data and to access such data.

* '''Right to Correction:''' Individuals may request corrections to inaccuracies in their personal data held by a controller.

* '''Right to Deletion:''' Individuals have the right to request the deletion of personal data collected by or provided to a controller.

* '''Right to Data Portability:''' Individuals can obtain a copy of their personal data in a readily usable and transferable format.

* '''Right to Opt-Out:''' Individuals may opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling that produces significant legal effects.

==Controller and Processor Obligations==

The TDPSA imposes various obligations on data controllers and processors<ref>[https://www.fisherphillips.com/en/insights/insights/faqs-businesses-texas-data-privacy-law Fisher Phillips FAQ]</ref>
<ref>[https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html Clifford Chance overview]</ref>, including:

* Limiting data collection to what is adequate, relevant, and reasonably necessary for processing purposes.

* Implementing reasonable administrative, technical, and physical data security practices.

* Providing a clear and accessible privacy notice that outlines data collection and processing practices.

* Conducting and documenting data protection assessments for high-risk processing activities.

* Ensuring contracts between controllers and processors include specific provisions governing personal data handling.

==Enforcement==

The Texas Attorney General holds exclusive enforcement authority under the TDPSA. Entities found to be in violation are subject to civil penalties of up to $7,500 per violation. Prior to enforcement, the Attorney General may grant a 30-day cure period for organizations to remedy identified violations.<ref>[https://www.consumerprivacyact.com/texas-data-privacy-and-security-act-tdpsa/ Consumer Privacy Act TDPSA overview]</ref>

==Cases==

← Older revision		Revision as of 05:00, 25 April 2026
Line 5:		Line 5:
	==Rights Codified==		==Rights Codified==

	The TDPSA codified the following privacy rights for Texas residents<ref>[https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act ~~Texas~~ Attorney General ~~TDPSA page]~~</ref>:		The TDPSA codified the following privacy rights for Texas residents<ref>{{Cite web \|title=Texas Data Privacy And Security Act {{!}} Office of the Attorney General \|url=https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act \|url-status=live \|archive-url=https://web.archive.org/web/20260418021327/https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act \|archive-date=2026-04-18 \|access-date=31 Mar 2026 \|website=Office of the Attorney General}}</ref>:

	* '''Right to Access:''' Individuals have the right to confirm whether a controller is processing their personal data and to access such data.		*'''Right to Access:''' Individuals have the right to confirm whether a controller is processing their personal data and to access such data.

	* '''Right to Correction:''' Individuals may request corrections to inaccuracies in their personal data held by a controller.		*'''Right to Correction:''' Individuals may request corrections to inaccuracies in their personal data held by a controller.

	* '''Right to Deletion:''' Individuals have the right to request the deletion of personal data collected by or provided to a controller.		*'''Right to Deletion:''' Individuals have the right to request the deletion of personal data collected by or provided to a controller.

	* '''Right to Data Portability:''' Individuals can obtain a copy of their personal data in a readily usable and transferable format.		*'''Right to Data Portability:''' Individuals can obtain a copy of their personal data in a readily usable and transferable format.

	* '''Right to Opt-Out:''' Individuals may opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling that produces significant legal effects.		*'''Right to Opt-Out:''' Individuals may opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling that produces significant legal effects.

	==Controller and Processor Obligations==		==Controller and Processor Obligations==
Line 22:		Line 22:
	<ref>[https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html Clifford Chance overview]</ref>, including:		<ref>[https://www.cliffordchance.com/insights/resources/blogs/talking-tech/en/articles/2023/12/the-texas-data-privacy-law-an-overview.html Clifford Chance overview]</ref>, including:

	* Limiting data collection to what is adequate, relevant, and reasonably necessary for processing purposes.		*Limiting data collection to what is adequate, relevant, and reasonably necessary for processing purposes.

	* Implementing reasonable administrative, technical, and physical data security practices.		*Implementing reasonable administrative, technical, and physical data security practices.

	* Providing a clear and accessible privacy notice that outlines data collection and processing practices.		*Providing a clear and accessible privacy notice that outlines data collection and processing practices.

	* Conducting and documenting data protection assessments for high-risk processing activities.		*Conducting and documenting data protection assessments for high-risk processing activities.

	* Ensuring contracts between controllers and processors include specific provisions governing personal data handling.		*Ensuring contracts between controllers and processors include specific provisions governing personal data handling.

	==Enforcement==		==Enforcement==