TEXAS

TEXAS Data Breach Notification Law

Tex. Bus. & Com. Code § 521.053; Texas DPSA

Texas requires notification within 30 days when 250 or more residents are affected. The Texas Data Privacy and Security Act (TDPSA), effective July 2024, adds new consumer rights. There is no private right of action under the breach notification statute — enforcement is through the AG only.

Notification Deadline
30 days
30 days from determination for breaches affecting 250+ Texans; otherwise without unreasonable delay
⚖️
Private Right of Action
No
💰
Statutory Damages
No private statutory damages under the breach notification statute. The AG may pursue civil penalties up to $500 per violation, capped at $50,000 per breach event (Tex. Bus. & Com. Code § 521.053). Under the TDPSA, penalties may be up to $7,500 per intentional violation.
🏛
AG Notification Required
Yes
AG notification required if 250+ TX residents affected

What This Law Covers

TEXAS's breach notification law requires businesses and government agencies that maintain personal information about TEXAS residents to notify affected individuals when that information is subject to unauthorized access or acquisition. "Personal information" typically includes Social Security numbers, driver's license numbers, financial account numbers, and in many states has been expanded to cover medical data, biometric data, online credentials, and tax IDs.

What the Company Must Tell You

A compliant breach notification to TEXAS residents must include:

  • A description of the breach — what happened and when
  • The types of personal information that were involved
  • What the company is doing to investigate and contain the breach
  • Steps you can take to protect yourself (e.g., credit freeze, fraud alert)
  • Contact information so you can ask questions

Attorney General Notification

Companies that experience a breach affecting TEXAS residents are required to notify the TEXAS Attorney General in addition to the affected individuals.

AG notification required if 250+ TX residents affected

Legal Disclaimer

This reference is for general educational purposes only and does not constitute legal advice. Last reviewed: 2025-01-01. Laws change frequently — always verify against the current official statute and consult a licensed attorney for advice specific to your situation.

Look up breaches affecting TEXAS residents

Search our database for companies that filed breach notifications with the TEXAS attorney general.

Legal Disclaimer

The information on this page is provided for general informational purposes only and does not constitute legal advice. Laws change frequently — always verify the current statute with the official state source or consult a licensed attorney in your jurisdiction before taking any action. This site is not a law firm and does not create an attorney-client relationship.

Made with AI in Macaly