Insights
The insight bank: planned shorter analyses of new developments. Insights analyze change; guides explain enduring duties.
What the Texas Cybersecurity Safe Harbor Requires a Business to Prove
Eligibility, program evidence, and the limits of the exemplary-damages protection
The Texas Data Broker Code Number Has Changed
Redesignation, amendments, and the risk of linking a citation to the wrong chapter
Driving Data Shows How an SDK Can Become a Data Supply Chain
Allstate, Arity, and General Motors allegations, recipient uses, and the current docket status
What the Texas Google Settlement Actually Resolved
Claims, agreed obligations, disposition, and limits of what a settlement establishes
Texas Health Records and Foreign Cloud Access
SB 1188, covered records, physical location, authorized access, and vendor diligence
The COPPA Rule and the Separate Age Verification Policy
Current rule duties and the distinct scope of the FTC's 2026 enforcement statement
SCOPE and App Stores Have Different Litigation Histories
Provision-level statutory and court status, described with careful attribution to the supplied procedural history
California Rules Are Effective Before Every Compliance Deadline
The approved assessment, audit, and ADMT rules and their staged implementation
Why Foreign Vendor Access Belongs in the Data Map
The DOJ program, PADFAA, counterparties, remote access, and legally distinct regimes
NIST Sanitization Guidance Has a New Final Revision
What Rev. 2 changes for a disposition program, with the cited final document as the authority
A Classification Draft Is Not a Final Standard
The discontinued IR 8496 draft, still useful as history, and current alternative materials
A Model Derived From Personal Data Is Not Automatically Anonymous
Linkability, inferences, PET limits, and issues still needing legal or technical resolution
Data Deletion Must Account for Restoration
Backups, replicas, vendor copies, and the return of previously deleted material
Old Information Can Still Be Essential Evidence
Dracula Data, archives, legal holds, context, and when disposition should be restricted
An Employee Exclusion Does Not Resolve All Workplace Privacy Duties
The TDPSA definition alongside biometrics, credit, health, monitoring, and multistate law
What a Governance Audit Must Be Able to Reconstruct
The historical source, permissions, rule version, recipients, and evidence of the decision
Texas Privacy Year in Review 2026
Annual Texas privacy review drawing from attributed dated tracker developments after a defined research cutoff.
Texas Privacy 2027 Session
Overview of the Texas Legislature 2027 regular session privacy, data security, breach, children, biometrics, health data, and government-data bills.