Privacy laws · Texas

Texas Data Privacy and Security Act.

Applies to any business that processes personal data and is not a 'small business' under the SBA definition. No consumer threshold. Very broad applicability.

/ Diagnostic check ClearConsent scans your storefront for signals related to this law — consent banner state, GPC support, Do Not Sell links, privacy policy disclosures, cookies, and trackers.

/ Effective
2024-07-01
Effective date
When the law took effect or will take effect.
/ Consumers
None
Consumer threshold
The number of Texas residents whose data triggers compliance.
/ Revenue
None
Revenue threshold
Annual revenue trigger for compliance, if applicable.
01 / Key requirements

What the law requires.

  • 01Privacy notice with specific disclosures
  • 02Right to access, correct, delete personal data
  • 03Right to data portability
  • 04Right to opt-out of sale, targeted advertising, profiling
  • 05Data protection assessments
  • 06Consent for sensitive data processing
  • 07Universal opt-out mechanism recognition (from 2025)
  • 08Data minimization
  • 09Small business exemption (SBA definition)
02 / Enforcement

Penalties & cure period.

Penalties

Up to $7,500 per violation.

Cure period

30-day cure period

Enforcement agency

Attorney General

03 / E-commerce

What this means for
your store.

Very broad scope - applies unless you qualify as SBA small business. Must recognize universal opt-out signals from Jan 2025.

Scan your store for TDPSA privacy gaps →