Texas Data Privacy and Security Act.
Applies to any business that processes personal data and is not a 'small business' under the SBA definition. No consumer threshold. Very broad applicability.
/ Diagnostic check ClearConsent scans your storefront for signals related to this law — consent banner state, GPC support, Do Not Sell links, privacy policy disclosures, cookies, and trackers.
What the law requires.
- 01Privacy notice with specific disclosures
- 02Right to access, correct, delete personal data
- 03Right to data portability
- 04Right to opt-out of sale, targeted advertising, profiling
- 05Data protection assessments
- 06Consent for sensitive data processing
- 07Universal opt-out mechanism recognition (from 2025)
- 08Data minimization
- 09Small business exemption (SBA definition)
Penalties & cure period.
Up to $7,500 per violation.
30-day cure period
Attorney General
What this means for
your store.
Very broad scope - applies unless you qualify as SBA small business. Must recognize universal opt-out signals from Jan 2025.