Data Privacy · Texas

Texas Data Privacy and Security Act

HB 4 - enacted in Texas.

Enacted
Status
2023
Enacted
21
States with data privacy laws
69/100
Texas strictness

The bottom line

Texas Data Privacy and Security Act is an enacted law in Texas, part of a mature, broadly-adopted data privacy landscape.

Enacted
effective 2024-07-01
21
states have data privacy laws
21/21
data privacy laws enacted nationally
69/100
Texas strictness score

Data compiled 2026-03-18 from the official Texas legislative record linked below; laws can be amended or repealed after this date.

Regulatory Snapshot: Texas Data Privacy and Security Act

Texas Data Privacy and Security Act (HB 4) is an enacted law in Texas under the Data Privacy category. It was enacted on 2023-06-18 and becomes effective on 2024-07-01. Texas currently reports 5 tracked regulations with 5 already in force, giving the state a regulatory strictness score of 69/100 relative to the national baseline. PlainRegWatch compiled this entry's data on 2026-03-18; consult the linked official source for the current, authoritative text.

Nationally, 21 data privacy statutes have been enacted and 0 additional bills remain pending - 21 distinct jurisdictions have codified rules in this area so far. That places Texas within a mature and broadly adopted data privacy landscape where compliance programs typically hinge on definitions in HB 4 itself.

Applicability under Texas Data Privacy and Security Act: Any entity in TX processing personal data. No revenue threshold. Penalty exposure is documented as: $7,500/violation. AG with 30-day cure (sunsets 2026). Notable exemptions: Small businesses (SBA), HIPAA, GLBA, nonprofits, state agencies..

Summary

Broadest applicability — no revenue or consumer count thresholds.

Key Requirements

Full consumer rights. Universal opt-out. Data protection assessments. Purpose limitation and minimization.

Penalties

$7,500/violation. AG with 30-day cure (sunsets 2026).

Applicability

Any entity in TX processing personal data. No revenue threshold.

Exemptions

Small businesses (SBA), HIPAA, GLBA, nonprofits, state agencies.

How Texas compares on data privacy

21 states regulate data privacy - Texas ranks #3 by overall regulatory strictness. Bar = state strictness score (0–100).

# State Strictness
1 California 100
2 Colorado 76
3 Texas (this state) 69
4 Connecticut 62
5 Minnesota 62
6 Oregon 62
7 Delaware 59
8 Virginia 59
9 Utah 55
10 Florida 48

Frequently Asked Questions

Which states have data privacy regulations?

As of the last verification, 21 states have enacted data privacy regulations, with 0 additional bills pending across other states. Texas is among the states that has enacted such legislation. Browse all data privacy regulations at plainregwatch.com for the complete state-by-state comparison.

When was Texas Data Privacy and Security Act enacted?

Texas Data Privacy and Security Act was enacted on 2023-06-18 and became effective on 2024-07-01. It was introduced as HB 4.

What are the penalties for violating Texas Data Privacy and Security Act?

$7,500/violation. AG with 30-day cure (sunsets 2026). Note that enforcement mechanisms and penalty structures may vary. Consult the official statute and qualified legal counsel for specific compliance requirements.

Does Texas Data Privacy and Security Act apply to small businesses?

Any entity in TX processing personal data. No revenue threshold. Many state regulations include thresholds or exemptions for smaller organizations. Review the full applicability criteria and consult legal counsel to determine your obligations.

How does Texas compare to other states on data privacy?

Texas has a regulatory strictness score of 69/100, based on 5 enacted regulations out of 5 tracked. Nationally, 21 states have enacted data privacy laws. Visit our state comparison page for a full ranking.

Where can I read the full text of Texas Data Privacy and Security Act?

The official text of Texas Data Privacy and Security Act (HB 4) is available from the Texas legislature. PlainRegWatch links to the official source for every tracked regulation. We recommend reviewing the full statute alongside qualified legal counsel for compliance planning.

Regulation Guides

Plain-language guides to help you understand the broader regulatory landscape.

Disclaimer: This summary is provided for informational purposes only and does not constitute legal advice. Regulation details may have changed since this data was compiled (2026-03-18). Always consult official sources and qualified legal counsel for compliance guidance.

More Texas Regulations

The bottom line

This law is already in force - here's what matters for data privacy compliance.

  • Texas Data Privacy and Security Act is enacted in Texas, effective 2024-07-01. Official source
  • 21 states now regulate data privacy; Texas ranks #3 by strictness - compare requirements before you operate across state lines. Compare states
  • See every regulation Texas tracks across all five policy areas. Texas profile

Summaries are general information, not legal advice; always confirm against the official statute and qualified counsel.

Data sourced from official state legislatures, IAPP, NCSL, and federal regulatory trackers. See our methodology for details. Retrieved and formatted by PlainRegWatch Editorial.

Verify with the official Texas source →

Every figure on PlainRegWatch is rendered directly from state source data, no number is typed in by an editor. This page draws directly on federal and state source data, no figure is typed in by an editor. See our editorial standards & corrections policy, the methodology behind these numbers, or report a data error.