United States — Texas
Business & Commerce Code § 541.105
1 provisions
Controllers must conduct and document data protection assessments for certain personal-data processing activities, and must provide a requested assessment to the attorney general.
Esheria Regulatory Atlas
Personal data, privacy, cybersecurity duties, processing, and cross-border transfers. Every result links to its stored legal text and available official source evidence.
229 matching statutes
United States — Texas
1 provisions
Controllers must conduct and document data protection assessments for certain personal-data processing activities, and must provide a requested assessment to the attorney general.
United States — Texas
1 provisions
A data broker conducting business in this state must protect personal data by maintaining a comprehensive information security program.
United States — Texas
1 provisions
An app store owner operating in this state must protect users’ personal data by minimizing collection and processing and using industry-standard encryption when transmitting it.
United States — Texas
1 provisions
The commission must treat certain water-pollution records as confidential when a person makes a satisfactory trade-secret showing to the executive director, and the executive director must not disclose confidential records when the recipient is unlikely to protect confidentiality.
United States — Texas
1 provisions
The corporation must set security standards and procedures to protect health information and health care data, including stronger protection for especially sensitive information and disciplinary procedures for privacy-law violations.
United States — Texas
1 provisions
The commission and the commissioner of insurance must share certain fire-protection injury and workers’ compensation information, keep identifying injury information confidential, and the commission must evaluate the data, make recommendations, and send them to the state fire marshal each year.
United States — Texas
1 provisions
Qualified research entities may use database information only for permitted subchapter purposes, but they cannot sell or share it and may publish identifying information only if the publication is free to the public.
United States — Texas
1 provisions
The commission must collect hospital discharge data about newborn treatment for prenatal alcohol or controlled-substance exposure and give the collected data to the Department of Family and Protective Services.
United States — Texas
1 provisions
The department may inspect records, compel providers to produce accurate records, and enter data-sharing agreements, but any agreement must protect patient confidentiality.
United States — Texas
1 provisions
Operators must protect covered student information and, in some cases, use a unique identifier and follow student data sharing agreements.
United States — Texas
1 provisions
A controller must limit personal data collection, use reasonable data security practices, and avoid several prohibited processing and discrimination practices.
United States — Texas
1 provisions
Certain listed health and personal-data information is exempt from this chapter.