TEXASDATA LAW

Guide outline Draft outline

Consumer Rights Requests and Opt Out Signals

How a Texas organization receives, verifies, fulfills, and documents consumer rights requests and opt-out signals.

LG03 · Hub: Texas Privacy Statutes · Intended reader: General counsel, privacy leads, and business operators

Scope

The end-to-end consumer rights request operation: intake, authentication, discovery, access, correction, deletion, portability, exclusions, responses, deadlines, and appeals by regime. It tracks recipients and systems rather than treating the website form as the whole process. Texas relevance: TDPSA rights requests and universal opt-out recognition are the operational core of Texas compliance, and appeal rights make Texas distinct from request-only regimes.

Section outline

  1. Deck: "How a Texas organization receives, verifies, fulfills, and documents consumer rights requests and opt-out signals."
  2. Short answer: rights covered, deadlines, authentication, appeals, signal recognition.
  3. Section: Request Intake Across Channels (beyond the web form).
  4. Section: Identity Verification, Authorized Agents, and Appeals.
  5. Section: Discovery: Finding Data Across Recipients and Systems.
  6. Section: Access, Correction, Deletion, and Portability by Regime.
  7. Section: Exclusions and Retention Exceptions.
  8. Section: Response and Appeal Workflow.
  9. Section: Downstream Processors and Request Propagation.
  10. Section: Universal Opt-Out Mechanisms and Preference Records.
  11. Section: Opt-Out-Signal Implementation Checklist.
  12. Section: Profiling, Inferences, and Significant Decisions.
  13. Section: Comparison to California and Other States.
  14. What Is Unsettled: signal-recognition disputes and authentication edge cases.
  15. Sources.
  16. Related reading: LG02 (TDPSA duties), LG04 (notices and consent), /resources/state-privacy-comparison/ (CR01).

Assigned content modules

  • G31: Operating Consumer Data Requests
  • G32: Identity Verification Authorized Agents and Appeals
  • G33: Universal Opt Out Signals and Preference Records
  • G34: Profiling Inferences and Significant Decisions

Required research sections

  • Universal opt-out mechanisms and signal handling (what it covers; includes the named implementation checklist for opt-out-signal handling)
  • Authorized agents (what it covers)
  • Identity verification, request authentication, and appeals (what it covers)
  • Response and appeal workflow (what it covers)
  • Downstream processors and request propagation (what it covers)
  • Retention exceptions (what it covers)
  • Profiling, inferences, and significant decisions (what it covers)
  • Comparison to California and other states (what it covers)
  • Consent records, interface design, and universal opt-out mechanisms (CE06 required coverage)

Research anchors and owner works

Anchors: L01, S05, S03, L09. Owner works: A01 (dependency; content to be supplied by owner, not invented)

Owner works: A01 (dependency; content to be supplied by owner, not invented).

Sister-site crossover

none required by Appendix F. Crossover seed c, but no verified AI-site companion is assigned to this guide; any future companion must be source-needed until verified.

Industry: All industries
Track: Compliance

Related reading

  • TDPSA duties