Texas Data Privacy and Security Act
Applies to: Organizations conducting business in Texas or producing goods and services consumed in Texas. Businesses that process or sell personal data. Small businesses, as defined by the United Small Business Administration. The Texas Data Privacy and Security Act was approved by the state Senate in May 2023. Additional consumer protections include:
· Consumer rights to obtain a copy of personal data that has been provided
· Opt-out of processing personal data for the purposes of targeted advertising, or for the sale of personal data.
· Consumer rights to correct inaccurate personal data and delete data that is provided.
Additional data processor and controller regulations include:
· Organizations must clearly disclose data collection and use policies, including whether they intend to sell personal data to third parties. Consumers must be given the option to opt-out if desired.
· Organizations must provide clear consent when sensitive data is collected.
· Data collectors cannot discriminate against consumers based on the personal information provided.
· Data collectors must limit the amount of personal data collected to what is “adequate, relevant, and reasonably necessary” for their data collection purposes.