Law / United States /
Texas
Texas Data Privacy and Security Act (HB 4), general applicability and scope
Tex. Bus. & Com. Code ch. 541, secs. 541.001-541.002
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 1 July 2024.
A comprehensive regime rule binding private bodies.
As of 23 August 2026.
What it requires
- Determine whether you conduct business in Texas or serve Texas residents, process or sell personal data, and are not a small business under SBA size standards before relying on any TDPSA exemption.
- Treat information a Texas consumer restricted to a specific audience as covered personal data, not as exempt publicly available information.
- Confirm whether a sector exemption applies. TDPSA excludes state agencies, Gramm-Leach-Bliley Act (GLBA)-regulated financial institutions, Health Insurance Portability and Accountability Act (HIPAA) covered entities, nonprofits, higher-education institutions, and electric utilities.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
TDPSA governs private-sector processing of Texas residents' personal data. It applies to a person who conducts business in Texas, or produces a product or service consumed by Texas residents, and who processes or sells personal data, unless the person is a small business under SBA size standards (a limited exception for selling sensitive data under sec. 541.107 applies regardless of size).
The Act excludes state agencies, political subdivisions, Gramm-Leach-Bliley Act (GLBA)-regulated financial institutions, Health Insurance Portability and Accountability Act (HIPAA) covered entities, nonprofits, higher-education institutions, and electric utilities, and 'personal data' excludes deidentified data and publicly available information.
When LexLint raises it
automated_outreachcrawls_webdeploys_chatbotprocesses_biometricsprocesses_voicetrains_models
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.