Texas. Data access / sharing. Act

Texas data broker lawTexas data broker law (Tex. Bus. & Com. Code ch. 509)

In force

Partly verified

Low confidence. 2025 amendment and penalty cap not verified. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.

§1Summary

Synopsis

Requires data brokers to register with the Secretary of State, post notices on their websites, and maintain a comprehensive information security programme.

Key themes

data broker registration
website notice
security programme

Unique features

Includes a mandatory security programme for brokers; registration fee.

SaaS relevance

Relevant to SaaS whose principal source of revenue is selling or licensing data of individuals they do not directly serve.

§2Obligations

Extraterritorial: Yes
Breach notification: None (see ch. 521)
DPO: No
Cross-border transfers: None
Maximum penalty: Civil penalties for failure to register (capped per year)

§3Dates

Key dates

Adopted 13 June 2023
In force 1 September 2023
Enacted by SB 2105 (2023); amended 2025 (SB 1343) broadening data broker definition (not verified).

§4Text and authority

Text

Authoritative text statutes.capitol.texas.gov

Authority

Texas Secretary of State (registry); Texas Attorney General

§5Where it applies

Domestic law of: Texas

§6Sources and verification

Sources consulted

statutes.capitol.texas.gov

Verification

Low confidence.

Partly verified

Low confidence. 2025 amendment and penalty cap not verified. Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.