Texans seeking control over their digital footprints can circle July 1 on their calendars as the day the Texas Data Privacy and Security Act kicks in, following last year’s legislative approval. The law, aimed at addressing the pervasive issue of consumer data exploitation, offers a suite of new rights to individuals regarding their personal data held by companies, as reported by FOX26 Houston.
Starting with what the law permits, consumers can now request access to their accumulated data, demand corrections, propose deletions, and reject its use in targeted ads or outright sales, companies now face an obligation, they must comply within a 45-day window or risk being slapped with fines up to $7,500, according to details shared by FOX26 Houston. But not all entities are subject to these stipulations; the law carves out exemptions for small businesses under 500 employees, state agencies, higher education institutions, electric service providers, and healthcare entities under the federal Department of Health and Human Services oversight.
The Texas Attorney General's Office, earlier this month, took concrete steps to support this legislative shift by forming a new enforcement arm for the law. "Any entity abusing or exploiting Texans’ sensitive data will be met with the full force of the law. Companies that collect and sell data in an unauthorized manner, harm consumers financially or use artificial intelligence irresponsibly present risks to our citizens that we take very seriously," Attorney General Ken Paxton was quoted in a statement obtained by KHOU. In light of this development, Texan consumers now have a dedicated avenue for filing grievances should companies falter on these newly granted rights.
Harnessing these protections is not without nuances; under the act, entities can extend the 45-day compliance timeframe provided they inform the requester and justify the delay companies can also outright decline requests if they supply valid reasons paired with appeal instructions, which reveals the law’s shades of grey despite its seemingly black-and-white intent. Despite this complexity, and as we edge closer to the date of its enforcement, the Texas Data Privacy and Security Act stands as a potent statement in a time when digital privacy concerns loom ever larger in the public conscience—Texans now have a considerable tool at their disposal to navigate the often murky waters of personal data usage and protection.
