United States — Texas
Business & Commerce Code § 541.105
1 provisions
Controllers must conduct and document data protection assessments for certain personal-data processing activities, and must provide a requested assessment to the attorney general.
Esheria Regulatory Atlas
Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. These records come from release legal-2026.07.26-907 and link directly to stored legal text.
229 matching statutes
United States — Texas
1 provisions
Controllers must conduct and document data protection assessments for certain personal-data processing activities, and must provide a requested assessment to the attorney general.
United States — Texas
1 provisions
A data broker conducting business in this state must protect personal data by maintaining a comprehensive information security program.
United States — Texas
1 provisions
An app store owner operating in this state must protect users’ personal data by minimizing collection and processing and using industry-standard encryption when transmitting it.
United States — Texas
1 provisions
The commission must treat certain water-pollution records as confidential when a person makes a satisfactory trade-secret showing to the executive director, and the executive director must not disclose confidential records when the recipient is unlikely to protect confidentiality.
United States — Texas
1 provisions
The corporation must set security standards and procedures to protect health information and health care data, including stronger protection for especially sensitive information and disciplinary procedures for privacy-law violations.
United States — Texas
1 provisions
The commission and the commissioner of insurance must share certain fire-protection injury and workers’ compensation information, keep identifying injury information confidential, and the commission must evaluate the data, make recommendations, and send them to the state fire marshal each year.
United States — Texas
1 provisions
Qualified research entities may use database information only for permitted subchapter purposes, but they cannot sell or share it and may publish identifying information only if the publication is free to the public.
United States — Texas
1 provisions
The commission must collect hospital discharge data about newborn treatment for prenatal alcohol or controlled-substance exposure and give the collected data to the Department of Family and Protective Services.
United States — Texas
1 provisions
The department may inspect records, compel providers to produce accurate records, and enter data-sharing agreements, but any agreement must protect patient confidentiality.
United States — Texas
1 provisions
Operators must protect covered student information and, in some cases, use a unique identifier and follow student data sharing agreements.
United States — Texas
1 provisions
A controller must limit personal data collection, use reasonable data security practices, and avoid several prohibited processing and discrimination practices.
United States — Texas
1 provisions
Certain listed health and personal-data information is exempt from this chapter.
United States — Texas
1 provisions
The commission must work with other appropriate state agencies to study and evaluate electronic access to geologic data and surface casing depths to help protect usable groundwater in the state.
United States — Texas
1 provisions
This section says the chapter applies to certain direct-to-consumer genetic testing companies and sets out several exceptions.
United States — Texas
1 provisions
The comptroller must develop an electronic audit database system and protect confidential information if a vendor is used.
United States — Texas
1 provisions
The department may make contracts, receive disease data, and publish studies. The executive commissioner must adopt rules and guidelines that control registry data, consent, confidentiality, and Medicaid information use.
United States — Texas
1 provisions
The department may buy insurance coverage it considers necessary to protect against losses from data breaches or cyber attacks.
United States — Texas
1 provisions
The commission must run a data-matching project to detect and prevent fraud, work with participating agencies, share lists of possible fraud or errors, and protect confidentiality.
United States — Texas
1 provisions
Texas agencies may collect emissions inspection data, and the commission must report it to the EPA and compare it with registration records for enforcement.
United States — Texas
1 provisions
This section says an emergency facility charging an unconscionable price for emergency care can be treated as engaging in deceptive practices, but the consumer protection division is limited by a 200% benchmark and data rules.