K01: Texas TDPSA and operative amendments
Statute; LG01, LG02, LG37, LG06, LG03
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
Related guides: LG01, LG02, LG03, LG06, LG37
K02: Texas universal opt-out provisions and delayed effective date
Statutory provision; describe the delayed date as dated, not assumed current
Texas · Statutory provision · Statute in Effect · Draft record: status not yet verified against primary sources
K03: Texas TDPSA assessment and processor provisions
Statutory provisions; includes HB 149 processor amendments
Texas · Statutory provisions · Statute in Effect · Draft record: status not yet verified against primary sources
K04: Texas CUBI and current AI-related amendments
Statute; apply C11 exact section 503.001 wording
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K05: Texas personal-information security and disposal obligations
Statutory provision
Texas · Statutory provision · Statute in Effect · Draft record: status not yet verified against primary sources
K06: Texas breach notice and AG reporting provisions
Statutory provision
Texas · Statutory provision · Statute in Effect · Draft record: status not yet verified against primary sources
K07: Texas data-broker registration and registry
Statute and rules; current chapter is Business and Commerce Code chapter 510 per C01
Texas · Statute and rules · Statute in Effect · Draft record: status not yet verified against primary sources
K08: Texas broker restrictions and 2025 amendments
Statutory amendments
Texas · Statutory amendments · Statute in Effect · Draft record: status not yet verified against primary sources
K09: Texas broker information-security duties and remedies
Statutory provisions; apply C01 section-specific DTPA distinction: section 510.009 applies the DTPA characterization to violations of section 510.007 only
Texas · Statutory provisions · Statute in Effect · Draft record: status not yet verified against primary sources
K10: Texas cybersecurity safe harbor under SB 2610
Statute; Business and Commerce Code chapter 542
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K11: Texas Medical Records Privacy Act
Statute; apply C03: HB 4224 adds section 181.105 only
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K12: Texas electronic-health-record law and SB 1188
Statute; apply C10 U.S.-or-territories wording
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K13: Texas SCOPE Act HB 18
Statute; Business and Commerce Code chapter 509
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K15: Texas App Store Accountability Act SB 2420
Statute; litigation posture tracked separately in K16
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K17: Texas TDPSA changes made by HB 149
Statutory amendments
Texas · Statutory amendments · Statute in Effect · Draft record: status not yet verified against primary sources
K18: Texas government AI and data management SB 1964
Statute
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K19: Texas Cyber Command HB 150 and agency duties
Statute
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K20: Texas government cyber training and reporting requirements
Statutes and rules
Texas · Statutes and rules · Pending · Draft record: status not yet verified against primary sources
K21: Texas government information confidentiality HB 3112
Statute
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K22: Texas Public Information Act privacy and cyber exceptions
Statute
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K23: Texas state and local records retention authority and schedules
Statutes and schedules
Texas · Statutes and schedules · Pending · Draft record: status not yet verified against primary sources
K24: Texas student-data protections and school-vendor requirements
Statute
Texas · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
RK001: TDPSA
anchors LG01, LG02, LG37, LG06, LG03
Texas · anchors LG01, LG02, LG37, LG06, LG03 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG01, LG02, LG03, LG06, LG37
RK002: Texas Data Broker Law
LG05; apply C01
Texas · LG05 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG05
RK003: CUBI
LG14; apply C11
Texas · LG14 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG14
RK004: Identity Theft Enforcement and Protection Act
LG22, LG24
Texas · LG22, LG24 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG22, LG24
RK005: Cybersecurity safe harbor
LG22, LG09; apply C02 where genomic overlap arises
Texas · LG22, LG09 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG09, LG22
RK006: SCOPE Act
LG12, LG13
Texas · LG12, LG13 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG12, LG13
RK007: App Store Accountability Act
LG12, LG13
Texas · LG12, LG13 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG12, LG13
RK008: Age verification for adult content
LG13
Texas · LG13 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG13
RK009: Texas Medical Records Privacy Act
LG16; apply C03
Texas · LG16 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG16
RK010: SB 1188 2025
LG16; apply C10
Texas · LG16 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG16
RK011: Texas Genomic Act of 2025, HB 130
LG15; apply C02: December 31 yearly certification under section 174.008 submitted by an attorney; private action under section 174.011 for specified plaintiffs
Texas · LG15 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG15
RK012: Telemarketing and text messages
LG40
Texas · LG40 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG40
RK013: DTPA
LG07, LG06; apply C01
Texas · LG07, LG06 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06, LG07
RK014: Interception and recording
LG08; Penal Code section 16.02 and Civil Practice and Remedies Code chapter 123 per M5
Texas · LG08 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG08
RK015: Website-tracking demand letters
LG08; apply C04, C07
Texas · LG08 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG08
RK016: Social Security number and identity data rules
LG18 or LG44 by context
Texas · LG18 or LG44 by context · Pending · Draft record: status not yet verified against primary sources
Related guides: LG18, LG44
RK017: Government data
LG44, LG45
Texas · LG44, LG45 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG44, LG45
RK018: Education data
LG19
Texas · LG19 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG19
RK019: Insurance
LG18, LG21
Texas · LG18, LG21 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG18, LG21
K14: Current SCOPE litigation orders and appeals
Litigation status; provision-level, per I07
Texas · Litigation status · Pending · Draft record: status not yet verified against primary sources
K16: Current SB 2420 trial and appellate orders
Litigation status
Texas · Litigation status · Pending · Draft record: status not yet verified against primary sources
K25: Texas AG Meta biometric settlement
Settlement and order; apply C08 milestone discipline: May 2025 announcement vs. later finalization kept distinct
Texas · Settlement and order · Settled · Draft record: status not yet verified against primary sources
K26: Texas AG Google privacy settlement
Settlement and order; apply C08: preserve May 2025 announcement and October 31, 2025 finalization as separate milestones; obtain executed terms before labeling final disposition
Texas · Settlement and order · Settled · Draft record: status not yet verified against primary sources
K27: Texas AG Allstate and Arity driving-data action
Pleading and current docket
Texas · Pleading and current docket · Pending · Draft record: status not yet verified against primary sources
K28: Texas AG General Motors driving-data action
Pleading and current docket
Texas · Pleading and current docket · Pending · Draft record: status not yet verified against primary sources
K29: Texas AG smart-TV data actions
Pleadings and current dockets; Sony, Samsung, LG, Hisense, TCL as separate matters per RK031-RK035
Texas · Pleadings and current dockets · Pending · Draft record: status not yet verified against primary sources
K30: Texas AG children's-data and platform actions
Pleadings and current dockets
Texas · Pleadings and current dockets · Pending · Draft record: status not yet verified against primary sources
RK021: Meta biometric (CUBI and DTPA) settlement
LG14, LG07; apply C08
Texas · LG14, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG14
RK022: Google settlement
LG14, LG21, LG07; apply C08
Texas · LG14, LG21, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG14, LG21
RK023: General Motors and OnStar
LG21, LG07; apply C08
Texas · LG21, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG21
RK024: Allstate and Arity
LG05, LG21, LG18, LG07; apply C08
Texas · LG05, LG21, LG18, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG05, LG07, LG18, LG21
RK025: TikTok
LG12
Texas · LG12 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG12
RK026: Texas AG December 2024 platform investigations
LG12, LG36, LG06
Texas · LG12, LG36, LG06 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06, LG12, LG36
RK027: Texas AG Meta AI Studio August 2025 CID
LG12, LG36, LG06
Texas · LG12, LG36, LG06 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06, LG12, LG36
RK028: Texas AG Character.AI August 2025 CID
LG12, LG36, LG06
Texas · LG12, LG36, LG06 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06, LG12, LG36
RK029: DeepSeek privacy investigation 2025
LG43, LG36
Texas · LG43, LG36 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG36, LG43
RK030: PowerSchool
LG23, LG24, LG19, LG07; apply C08
Texas · LG23, LG24, LG19, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG19, LG23, LG24
RK036: Snap
LG12
Texas · LG12 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG12
RK037: Shein
LG07; apply C08
Texas · LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07
RK038: Netflix
LG08, LG11, LG07; apply C08
Texas · LG08, LG11, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG08, LG11
RK039: Meta and WhatsApp
LG22, LG07; apply C08
Texas · LG22, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG22
RK040: Discord
LG12, LG07; apply C08
Texas · LG12, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG12
RK041: Roblox
LG12, LG07; apply C08
Texas · LG12, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG12
RK046: 23andMe bankruptcy: Texas consumer privacy ombudsman position
LG15, LG38
Texas · LG15, LG38 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG15, LG38
RK047: AG consumer alert on CIPA website-tracking demand letters, September 17, 2026
LG08; apply C07: report neutrally
Texas · LG08 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG08
RK048: Texas v. HHS dismissal and docket
LG16
Texas · LG16 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG16
RK049: Purl v. HHS reproductive-health privacy ruling and appeal status
LG16
Texas · LG16 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG16
RK050: AG data privacy and security enforcement team, announced June 2024
LG06
Texas · LG06 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06
K31: FTC Act Section 5 privacy and security enforcement
Statute and separate final orders
Federal · Statute and separate final orders · Statute in Effect · Draft record: status not yet verified against primary sources
K32: COPPA statute and amended rule
Statute and final rule; 16 C.F.R. part 312
Federal · Statute and final rule · Statute in Effect · Draft record: status not yet verified against primary sources
K33: FTC 2026 age-verification policy statement
Agency policy; distinct from the COPPA rule per I06
Federal · Agency policy · Pending · Draft record: status not yet verified against primary sources
K34: FTC Health Breach Notification Rule amendments
Final rule; 16 C.F.R. part 318; note the rescinded 2021 policy statement per RK061
Federal · Final rule · Decided · Draft record: status not yet verified against primary sources
K35: FTC GLBA Safeguards Rule including notification duty
Final rule; 16 C.F.R. part 314
Federal · Final rule · Decided · Draft record: status not yet verified against primary sources
K36: SEC Regulation S-P amendments and phased compliance
Final rule
Federal · Final rule · Decided · Draft record: status not yet verified against primary sources
K37: HIPAA privacy, security, and breach requirements
Final rules; 45 C.F.R. parts 160, 164; Security Rule rulemaking status source-dated
Federal · Final rules · Decided · Draft record: status not yet verified against primary sources
K38: 42 CFR part 2 substance-use confidentiality amendments
Final rule
Texas · Final rule · Decided · Draft record: status not yet verified against primary sources
K39: FERPA and school disclosure regulations
Statute and rules
Texas · Statute and rules · Statute in Effect · Draft record: status not yet verified against primary sources
K40: FCRA consumer-reporting data duties
Statute and rules
Federal · Statute and rules · Statute in Effect · Draft record: status not yet verified against primary sources
K41: ECPA, Stored Communications Act, and CLOUD Act
Statutes
Federal · Statutes · Pending · Draft record: status not yet verified against primary sources
K42: Computer Fraud and Abuse Act and controlling access opinions
Statute and decisions
Texas · Statute and decisions · Statute in Effect · Draft record: status not yet verified against primary sources
K43: DOJ Data Security Program, 28 CFR part 202
Final rule; apply C05 and C06: separate the October 5, 2025 and October 6 dates by source, keep audits, officer certification, retained reports, and conditional cloud-transaction reports as distinct provisions
Federal · Final rule · Decided · Draft record: status not yet verified against primary sources
K44: PADFAA and FTC broker enforcement materials
Statute and agency actions
Federal · Statute and agency actions · Statute in Effect · Draft record: status not yet verified against primary sources
K45: CISA CIRCIA reporting rule current status
Rulemaking or final rule; source-sensitive treatment
Texas · Rulemaking or final rule · Decided · Draft record: status not yet verified against primary sources
RK051: FTC Act Section 5, including the final General Motors and OnStar order dated January 14, 2026
LG21, LG41, LG07
Federal · LG21, LG41, LG07 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG07, LG21, LG41
RK052: COPPA and amended COPPA Rule
LG11, LG13
Federal · LG11, LG13 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG11, LG13
RK053: PADFAA 2024 and FTC broker enforcement
LG43, LG05; apply C05, C06
Federal · LG43, LG05 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG05, LG43
RK054: DOJ Data Security Program, 28 CFR part 202
LG43; apply C05, C06
Federal · LG43 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG43
RK055: HIPAA Rules
LG16
Federal · LG16 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG16
RK056: GLBA Privacy Rule and FTC Safeguards Rule
LG18, LG25
Federal · LG18, LG25 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG18, LG25
RK057: FCRA, VPPA, ECPA/SCA, CLOUD Act, TCPA
LG18, LG20, LG45, LG36, LG08, LG40
Federal · LG18, LG20, LG45, LG36, LG08, LG40 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG08, LG18, LG20, LG36, LG40, LG45
RK058: TAKE IT DOWN Act 2025
LG12, LG41
Texas · LG12, LG41 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG12, LG41
RK059: SEC cybersecurity disclosure rules
LG27, LG29
Federal · LG27, LG29 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG27, LG29
RK060: CIRCIA incident reporting rule
LG27, LG23, LG25
Texas · LG27, LG23, LG25 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG23, LG25, LG27
RK061: FTC Health Breach Notification Rule
LG17, LG25
Federal · LG17, LG25 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG17, LG25
RK062: FTC personalized-pricing policy statement and study
LG08
Federal · LG08 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG08
RK063: FCC TCPA consent clarifications and CAN-SPAM
LG40
Federal · LG40 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG40
RK064: ROSCA and OFAC ransomware-payment risk
LG04, LG23
Federal · LG04, LG23 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG04, LG23
RK065: CFIUS review of sensitive-personal-data transactions
LG43, LG38; apply C05, C06
Federal · LG43, LG38 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG38, LG43
RK066: Federal preemption watch
LG41, LG18
Texas · LG41, LG18 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG18, LG41
K46: California CCPA and CPRA
Statute
Other state · Statute · Statute in Effect · Draft record: status not yet verified against primary sources
K47: California approved privacy assessment, audit, and ADMT regulations
Final rules with staged dates
Other state · Final rules with staged dates · Decided · Draft record: status not yet verified against primary sources
K48: California Delete Act and DROP requirements
Statute and final rules
Other state · Statute and final rules · Statute in Effect · Draft record: status not yet verified against primary sources
K49: Colorado, Connecticut, Virginia, and other relevant state laws
one record per enacted instrument
Texas · one record per enacted instrument · Pending · Draft record: status not yet verified against primary sources
K50: Washington and Nevada consumer-health-data regimes
separate statutes
Texas · separate statutes · Pending · Draft record: status not yet verified against primary sources
K51: Illinois BIPA amendments and controlling decisions
Statute and decisions
Texas · Statute and decisions · Statute in Effect · Draft record: status not yet verified against primary sources
K52: EU GDPR and territorial-scope authorities
Regulation and decisions
International · Regulation and decisions · Decided · Draft record: status not yet verified against primary sources
K53: EU Data Act and operative implementation
Regulation
International · Regulation · Pending · Draft record: status not yet verified against primary sources
K54: EU-US Data Privacy Framework and current litigation
Decision and court status
Texas · Decision and court status · Decided · Draft record: status not yet verified against primary sources
K55: EU standard contractual clauses
Commission decision
International · Commission decision · Decided · Draft record: status not yet verified against primary sources
K56: UK GDPR and Data Use and Access Act commencement
Statutes and commencement
International · Statutes and commencement · Pending · Draft record: status not yet verified against primary sources
K57: UK transfer instruments and adequacy decisions
separate instruments
Texas · separate instruments · Pending · Draft record: status not yet verified against primary sources
RK067: The state patchwork
LG41; split by actual jurisdiction
Texas · LG41 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG41
RK068: California
LG41, LG02, LG03, LG05
Other state · LG41, LG02, LG03, LG05 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG02, LG03, LG05, LG41
RK069: Other states' children's codes, health data laws, biometric laws
LG14, LG12, LG17, LG41
Texas · LG14, LG12, LG17, LG41 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG12, LG14, LG17, LG41
RK070: EU GDPR, UK GDPR, Data Privacy Framework
LG42
International · LG42 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG42
RK071: Multistate AG coordination
LG06, LG41
Texas · LG06, LG41 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06, LG41
RK072: Recent state changes to track
LG12, LG18, LG20, LG41, LG08
Texas · LG12, LG18, LG20, LG41, LG08 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG08, LG12, LG18, LG20, LG41
K58: NIST Privacy Framework version and revision status
Voluntary framework
Federal · Voluntary framework · Pending · Draft record: status not yet verified against primary sources
K59: NIST Data Governance and Management Profile
Development project; draft status
Federal · Development project · Pending · Draft record: status not yet verified against primary sources
K60: NIST CSF 2.0
Voluntary framework
Federal · Voluntary framework · Pending · Draft record: status not yet verified against primary sources
K61: NIST SP 800-88 Revision 2
Final voluntary technical guidance; per I10
Federal · Final voluntary technical guidance · Pending · Draft record: status not yet verified against primary sources
K62: NIST SP 800-61 Revision 3
Final voluntary technical guidance
Federal · Final voluntary technical guidance · Pending · Draft record: status not yet verified against primary sources
K63: NIST IR 8496 draft with development ceased
Historical draft; per I11
Federal · Historical draft · Pending · Draft record: status not yet verified against primary sources
K64: NIST SP 800-188 de-identification guidance
Final voluntary technical guidance
Federal · Final voluntary technical guidance · Pending · Draft record: status not yet verified against primary sources
K65: Brookshire Brothers v. Aldridge and preservation rules
Decision and court rules; LG35
Texas · Decision and court rules · Decided · Draft record: status not yet verified against primary sources
Related guides: LG35
K66: Morgan Stanley 2022 SEC data-disposal order
Settled administrative order; LG35
Federal · Settled administrative order · Pending · Draft record: status not yet verified against primary sources
Related guides: LG35
RK020: Next session
LG06, LG41; feeds the 2027 legislative tracker
Texas · LG06, LG41 · Pending · Draft record: status not yet verified against primary sources
Related guides: LG06, LG41