Topics
Nine hubs organizing the field, from Texas privacy statutes to government data.
Texas Privacy Statutes
This hub explains the Texas statutes that create the everyday privacy duties of a Texas organization, with the Texas Data Privacy and Security Act as the center of gravity. It maps who the Act reaches and who it leaves alone: the threshold structure with no ge...
Enforcement and Litigation
This hub covers how Texas privacy law is enforced and how disputes are litigated. At its center is the Attorney General's data privacy and security enforcement program: civil investigative demands under Business and Commerce Code § 17.61, notices, cure provisi...
Children Teens and Age Verification
This hub separates the overlapping regimes that govern children, teenagers, and age verification for Texas organizations. It starts with federal law: COPPA's operator duties, actual-knowledge standard, parental consent, retention, security, and third-party rul...
Sensitive and Sector Data
This hub keeps distinct regimes apart when they govern the same dataset. It compares the TDPSA's sensitive-data category with the Capture or Use of Biometric Identifier Act's biometric identifiers under § 503.001, including the HB 149 amendments, consent and r...
Security Incidents and Breach Response
This hub covers how a Texas organization prevents, manages, and reports security incidents. It begins with reasonable security duties under Business and Commerce Code chapter 521 and the cybersecurity safe harbor in chapter 542, explaining the employee-size cr...
Data Governance and the Information Lifecycle
This hub treats data as an organizational asset that needs ownership, discipline, and a managed end of life. It starts with governance: decision rights, data owners and stewards, proportionate operating models for small and large organizations, policies and ch...
Vendors Data Sharing and Transactions
This hub covers what happens when data leaves the organization that collected it. It starts with processing roles: distinguishing processors from controllers and independent third parties by the actual processing relationship, with TDPSA duties, data processin...
Federal Multistate and Cross Border Rules
This hub addresses the law outside Texas that still reaches a Texas organization. It begins with the federal sectoral landscape: the FTC Act's Section 5 authority in 15 U.S.C. § 45, COPPA, HIPAA, GLBA, the FCRA, the Stored Communications Act and CLOUD Act, CIR...
Government Data Records and Access
This hub covers the data of and held by Texas government. It explains the Texas Public Information Act in Government Code chapter 552: what counts as public information, possession or control, exceptions including the privacy and cybersecurity exceptions, proc...