Business & Commerce Code § 501.052

Sec. 501.052. PRIVACY POLICY NECESSARY TO REQUIRE DISCLOSURE OF SOCIAL SECURITY NUMBER. (a) A person may not require an individual to disclose the individual's social security number to obtain goods or services from or enter into a business transaction with the person unless the person: (1) adopts a privacy policy as provided by Subsection (b); (2) makes the privacy policy available to the individual; and (3) maintains under the privacy policy the confidentiality and security of the social security number disclosed to the person. (b) A privacy policy adopted under this section must include: (1) how personal information is collected; (2) how and when the personal information is used; (3) how the personal information is protected; (4) who has access to the personal information; and (5) the method of disposal of the personal information. Added by Acts 2007, 80th Leg., R.S., Ch. 885 (H.B. 2278), Sec. 2.01, eff. April 1, 2009.