TexasTexasLawSB 2105
Texas data broker law
Requires data brokers to register annually with the Secretary of State, post consumer notices and maintain a data security program, with civil penalties.
Took effectSep 1, 2023 3 years ago
- Body
- Texas Legislature
- Session
- 2023
- Introduced
- Mar 9, 2023
- In effect since
- Sep 1, 20233 years ago
- Votes
- Senate 29-2
- Sponsors
- Bipartisan
Timeline
Sep 1, 2023 3 years ago
Jun 18, 2023 3 years ago
May 24, 2023 3 years ago
May 3, 2023 3 years ago
Mar 9, 2023 3 years ago
Sponsors
- D (Democrat)Nathan Johnson
- R (Republican)Justin Holland
Related
SCOPE Act (Securing Children Online through Parental Empowerment)
Requires digital service providers to register users' ages, limit collection and use of minors' data, give parents supervision tools, and filter harmful content for known minors.
App Store Accountability Act
Requires mobile app stores to verify user ages, obtain parental consent before minors download apps or make purchases, and share age-category data with developers.
Cybersecurity safe harbor for businesses
Bars exemplary damages in data breach lawsuits against businesses with fewer than 250 employees that maintained a qualifying cybersecurity program.
Electronic health records and AI in health care
Sets electronic health record requirements, including storage of records in the United States, and allows practitioners to use AI for diagnostic recommendations only if they review AI-generated records and disclose the use to patients.
Genetic information security
Bars covered facilities and companies from using genome sequencers or software produced by foreign adversaries and from storing Texans' genome sequencing data in foreign adversary countries, with civil penalties and a private right of action.
Government use of artificial intelligence
Sets rules for state and local government use of AI, including a Department of Information Resources AI code of ethics and minimum standards, inventories of agency AI systems, and reviews of heightened-scrutiny AI systems used in consequential decisions.
Data broker notice requirements
Updates the notice that data brokers must post on their websites and include with their Texas registration statements.
Data broker regulation amendments
Broadens the definition of data broker to any business that collects, processes or transfers personal data it did not collect directly from the individual, removing the principal-revenue test from the 2023 law.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.