TexasTexasLawHB 3186
Capture or Use of Biometric Identifier Act (CUBI) amendments
Amended the Capture or Use of Biometric Identifier Act (Business and Commerce Code 503.001) to limit disclosure of commercially captured biometric identifiers and require their destruction within one year after the collection purpose expires; the act is enforced by the attorney general.
Attorney general announced $1.375 billion privacy settlement with Google that included biometric data claimsMay 9, 2025 1 year ago
- Body
- Texas Legislature
- Session
- 2009
- Introduced
- Mar 10, 2009
- In effect since
- Sep 1, 200917 years ago
- Votes
- House 144-0, Senate 31-0, House concurred 136-0
- Sponsors
- R (Republican)Republican
- Topics
- BiometricsPrivacy
Timeline
May 9, 2025 1 year ago
Jul 30, 2024 2 years ago
Sep 1, 2009 17 years ago
Jun 19, 2009 17 years ago
May 29, 2009 17 years ago
May 25, 2009 17 years ago
May 15, 2009 17 years ago
Mar 10, 2009 17 years ago
Sponsors
- R (Republican)Brian McCall
- R (Republican)Robert Duncan
Related
SCOPE Act (Securing Children Online through Parental Empowerment)
Requires digital service providers to register users' ages, limit collection and use of minors' data, give parents supervision tools, and filter harmful content for known minors.
App Store Accountability Act
Requires mobile app stores to verify user ages, obtain parental consent before minors download apps or make purchases, and share age-category data with developers.
Texas Responsible Artificial Intelligence Governance Act (TRAIGA)
Bans developing or deploying AI systems for certain intentional harms such as behavioral manipulation toward self-harm, unlawful discrimination, government social scoring and sexual deepfakes of minors, requires state agencies to disclose AI use to consumers, and creates an AI regulatory sandbox and the Texas Artificial Intelligence Council, enforced by the attorney general.
Cybersecurity safe harbor for businesses
Bars exemplary damages in data breach lawsuits against businesses with fewer than 250 employees that maintained a qualifying cybersecurity program.
Electronic health records and AI in health care
Sets electronic health record requirements, including storage of records in the United States, and allows practitioners to use AI for diagnostic recommendations only if they review AI-generated records and disclose the use to patients.
Genetic information security
Bars covered facilities and companies from using genome sequencers or software produced by foreign adversaries and from storing Texans' genome sequencing data in foreign adversary countries, with civil penalties and a private right of action.
Data broker notice requirements
Updates the notice that data brokers must post on their websites and include with their Texas registration statements.
Data broker regulation amendments
Broadens the definition of data broker to any business that collects, processes or transfers personal data it did not collect directly from the individual, removing the principal-revenue test from the 2023 law.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.