TexasTexasLawSB 2610
Cybersecurity safe harbor for businesses
Bars exemplary damages in data breach lawsuits against businesses with fewer than 250 employees that maintained a qualifying cybersecurity program.
Took effectSep 1, 2025 1 year ago
- Body
- Texas Legislature
- Session
- 2025
- Introduced
- Mar 13, 2025
- In effect since
- Sep 1, 20251 year ago
- Votes
- Senate 31-0, House 109-27
- Sponsors
- Bipartisan
Timeline
Sep 1, 2025 1 year ago
Jun 20, 2025 1 year ago
May 28, 2025 1 year ago
Apr 30, 2025 1 year ago
Mar 13, 2025 1 year ago
Sponsors
- D (Democrat)Cesar Blanco
- R (Republican)Giovanni Capriglione
Related
SCOPE Act (Securing Children Online through Parental Empowerment)
Requires digital service providers to register users' ages, limit collection and use of minors' data, give parents supervision tools, and filter harmful content for known minors.
App Store Accountability Act
Requires mobile app stores to verify user ages, obtain parental consent before minors download apps or make purchases, and share age-category data with developers.
Ban on Chinese AI and social media apps on state devices
Governor directive banning AI and social media apps affiliated with the People's Republic of China and the Chinese Communist Party, including DeepSeek, RedNote and Lemon8, from government-issued devices and adding them to the state prohibited technologies list.
Prohibited technologies list update (AI, hardware and software)
Governor directive adding Chinese-affiliated AI companies, hardware and software to the state prohibited technologies list for state employees and devices and naming the Texas Cyber Command lead agency for identifying such threats.
Electronic health records and AI in health care
Sets electronic health record requirements, including storage of records in the United States, and allows practitioners to use AI for diagnostic recommendations only if they review AI-generated records and disclose the use to patients.
Genetic information security
Bars covered facilities and companies from using genome sequencers or software produced by foreign adversaries and from storing Texans' genome sequencing data in foreign adversary countries, with civil penalties and a private right of action.
Texas Cyber Command
Establishes the Texas Cyber Command, with a facility in San Antonio, to prevent and respond to cybersecurity incidents, and transfers state cybersecurity duties from the Department of Information Resources to it.
Data broker notice requirements
Updates the notice that data brokers must post on their websites and include with their Texas registration statements.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.