Texas Data Privacy and Security Act
Enacted in force
Fields requiring verification
- enforcement date: Unverified — No distinct enforcement-start date was established. Primary source
In plain English
- Persons conducting business in Texas or producing products/services consumed by residents, processing or selling personal data, and not SBA-defined small businesses. Primary source
- Small businesses separately need prior consent for sensitive-data sales; entity/data exemptions apply. Primary source
- Provide required notices and process authenticated rights requests. Primary source
- Offer applicable sale, targeted-advertising and profiling opt-outs. Primary source
- Obtain required sensitive-data consent and conduct required data-protection assessments. Primary source
Dates and phased obligations
Verified operative date: 2024-07-01. Primary source
Main duties commenced July 1, 2024; §541.055(e) agent-designation/technology provision commenced January 1, 2025, as stated in act §8. Source and qualifications
Questions from this record
Who does TX HB4 / B&C541 cover?
Persons conducting business in Texas or producing products/services consumed by residents, processing or selling personal data, and not SBA-defined small businesses. Small businesses separately need prior consent for sensitive-data sales; entity/data exemptions apply. Primary source
What is the law’s status?
Enacted / in force Primary source
What date does this record track?
Verified operative date: 2024-07-01. Primary source
Has this record been verified?
This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source
- Texas enrolled HB 4§§541.002, .051–.055, .101–.107, .151–.155; act §8
Verification history
Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.