Securiti leads GigaOm's DSPM Vendor Evaluation with top ratings across technical capabilities & business value.

View
Contact Us See a demo

Texas’s Data Privacy and Security Act (TDPSA)

Last Updated on June 25, 2024

Schedule Your
Personal Demo

Learn how you can leverage Securiti’s Data Command Center to address data security, privacy, governance, and compliance.

See a demo
Schedule your demo today

Texas’s Data Privacy and Security Act (TDPSA) was enacted on 18 June 2023 and is expected to come into effect on 1 July 2024. Thus, Texas officially became the 11th state in the US to have a comprehensive regulation on data privacy.

The TDPSA contains all the necessary provisions to ensure all consumers and their personal data are afforded appropriate protection while also being flexible enough for businesses to continue their operations without a major overhaul of their data management practices being necessary.

The law applies to all entities that conduct business in Texas or produce products or services specifically catering to Texas residents, engage in the sale of personal data. The law does not apply to small businesses as defined by the United States Small Business Administration unless you engage in the sale of sensitive data without the consent of the consumer. Key obligations for organizations subject to the TDPSA include data minimization, protection for sensitive data, transparent privacy notice, and thorough and regular data protection assessments.

The Solution

Securiti empowers organizations to ensure compliance with each provision of Texas’ Data Privacy and Security Act (TDPSA) with its plethora of products, which include, but are not limited to, AI-driven data discovery, DSR automation, universal consent management, autonomous documented accountability, data breach management, and vendor risk assessment.
Each of the solutions mentioned above is backed up by state-of-the-art artificial intelligence and machine-learning-based algorithms, making Securiti a market leader in providing data compliance and governance solutions.

Panama’s PDPL Solutiion

Request a demo today to learn how Securiti can help you and your organization comply with Texas’ TDPSA.

Readiness Assessment

TDPSA Provisions

Automate regular internal assessments of various internal data-related activities and mechanisms to evaluate their effectiveness and make appropriate adjustments with our collaborative, multi-regulation, readiness assessment system per TDPSA requirements.

Readiness securiti
Texas

Auto Compliance Management

TDPSA Provisions

Automate compliance with TDPSA using Securiti common controls and tests.

Privacy Notice Management

Section(s): 541.102

Automate the generation and regular refresh of a privacy policy that adequately informs the users about your organization's data processing practices while being fully compliant with all applicable provisions of law with pre-built templates in compliance with the TDPSA.

Privacy Notice Management
Universal Consent Management

Universal Consent Management

Section(s): 541.005, 541.101(b)(1), 541.101(b)(4), 541.107

Ensure compliance with the TDPSA’s consent-related provisions across all major data processing activities by monitoring users' consent status via a central dashboard. Doing so allows organizations to prevent any processing or potential transfer, sharing, or selling of data to third parties unless explicitly consented to by the users.

Cookie Consent Management

Section(s): 541.051(b)(5), 541.101(b)(1), 541.101(b)(4), 541.103, 541.107

Automate your organization's entire cookie consent management to ensure all cookies used across the data infrastructure comply with the legal requirements. Additionally, scan your website to classify cookies, deploy customized consent collection points, and link consent to individual users.

Cookie Consent
Panama Automate People Data Graph securiti

Sensitive Data Intelligence

Section(s): 541.001(3), 541.001(12), 541.001(14), 541.001(19), 541.001(21), 541.001(25), 541.001(26), 541.001(27), 541.001(29)

Leverage dedicated data mapping, classification, and cataloging modules to ensure you gain real-time insights related to your organization’s entire personal and sensitive data infrastructure via visualization of data sprawl.

Data Mapping Automation

Section(s): 541.052(f)(1), 541.101, 541.103, 541.104

Trace, classify & label data within your organization's data infrastructure to ensure appropriate security controls are enabled on the most sensitive data in your organization. Leverage the same module to identify sensitive files such as consent forms and financial statements and record them under appropriate categories.

Data mapping
DSR

Data Subject Rights Fulfillments

Section(s): 541.051, 541.052, 541.053, 541.054, 541.055

Automate the entire process related to fulfilling consumer data rights-related requests with customized web forms and DSR request verification to gain real-time updates on the status of each request via the central dashboard.

Data Breach Management

Section(s): 541.104(a)(2)

Track, manage, and mitigate potential data security incidents while automating data breach response notifications to all affected stakeholders as soon as legally obliged by leveraging a knowledge database on security incident diagnosis and response per global regulatory requirements.

Panama Assess Data Protection Measures securiti
Panama Automate Records of Processing Activities securiti

Data Protection Assessment Automation

​​Section(s): 541.105(a)

Automate data protection assessments (DPAs) by leveraging pre-built compliance templates, review responses, track each assessments’ individual progress in real time, and share assessments’ insights and results with third parties.

Vendor Assessments

Section(s): 541.104

Track all the organization's third-party vendors' relevant data processing activities in real-time to ensure their data processing practices related to shared data comply with the relevant regulatory requirements.

Vendor Management
Data Security Posture

Data Security Posture Management

Section(s): 541.101(a)(2)

Gain comprehensive visibility into potential misconfigurations in data assets across public clouds, data clouds, SaaS, and on-premises environments, in addition to contextual data insights, including people ownership, regulatory obligations, and security and privacy metadata.

Key Rights Under Texas’ TDPSA

Like most data privacy regulations, Texas’ TDPSA empowers all users with the following consumer data rights:

Right to Access

Consumers have the right to confirm whether a controller is processing their personal data and to access that data subsequently.

Right to Correction

Consumers have the right to correct any inaccuracies in their personal data, regardless of the nature of the data and the purpose for which it was collected.

Right to Deletion

Consumers have the right to request any collected personal data be deleted.

Right to Portability

Consumers have the right to request a copy of their personal data provided in a portable and readily usable format that can be transmitted to another controller without any issues.

Right to Opt-Out of Processing

Consumers have the right to opt out of the processing of their data altogether if the processing is for the following purposes:

  • Targeted advertising;
  • Sale of personal data;
  • Profiling for purposes of a decision that produces a legal consequence for the consumer.

Facts Related to Texas’ TDPSA

Here are some important facts related to Texas’s Data Privacy and Security Act (TDPSA):

1

Organizations must gain explicit consent to process sensitive personal data, which includes data like genetic, biometric, and precise geolocation data, among others;

2

The Texas Attorney General’s office has the exclusive regulatory authority to enforce the TDPSA;

3

Any entity found in violation of the TDPSA is liable for a civil penalty amount not exceeding $7,500 for each violation;

4

The TDPSA does not provide a basis for a private right of action for a violation of any of its provisions;

5

The TDPSA comes into effect on 1 July 2024, allowing subject organizations ample time to ensure compliance.

Analyze this article with AI

ChatGPT Claude Perplexity Grok
Prompts open in third-party AI tools.
IDC MarketScape

Securiti named a Leader in the IDC MarketScape for Data Privacy Compliance Software

Read the Report
Please enter a minimum of 3 characters to begin your search.
Videos
View More
January 20, 2025
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
January 15, 2025
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
January 2, 2025
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
December 24, 2024
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
November 1, 2024
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
October 29, 2024
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
August 12, 2024
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
June 3, 2024
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
January 29, 2024
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...
AWS Startup Showcase Cybersecurity Governance With Generative AI View More
October 17, 2023
AWS Startup Showcase Cybersecurity Governance With Generative AI
Balancing Innovation and Governance with Generative AI Generative AI has the potential to disrupt all aspects of business, with powerful new capabilities. However, with...

Spotlight Talks

Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Spotlight 13:32
Ensuring Solid Governance Is Like Squeezing Jello
Watch Now View
Latest
View More
September 30, 2025
Securiti and Databricks: Putting Sensitive Data Intelligence at the Heart of Modern Cybersecurity
Securiti is thrilled to partner with Databricks to extend Databricks Data Intelligence for Cybersecurity. This collaboration marks a pivotal moment for enterprise security, bringing...
Shrink The Blast Radius: Automate Data Minimization with DSPM View More
August 27, 2025
Shrink The Blast Radius
Recently, DaVita disclosed a ransomware incident that ultimately impacted about 2.7 million people, and it’s already booked $13.5M in related costs this quarter. Healthcare...
View More
October 7, 2025
All You Need to Know About Ontario’s Personal Health Information Protection Act 2004
Here’s what you need to know about Ontario’s Personal Health Information Protection Act of 2004 to ensure effective compliance with it.
View More
September 25, 2025
What is Trustworthy AI? Your Comprehensive Guide
Learn what Trustworthy AI means, the principles behind building reliable AI systems, its importance, and how organizations can implement it effectively.
Maryland Online Data Privacy Act (MODPA) View More
October 6, 2025
Maryland Online Data Privacy Act (MODPA): Compliance Requirements Beginning October 1, 2025
Access the whitepaper to discover the compliance requirements under the Maryland Online Data Privacy Act (MODPA). Learn how Securiti helps ensure swift compliance.
Retail Data & AI: A DSPM Playbook for Secure Innovation View More
September 30, 2025
Retail Data & AI: A DSPM Playbook for Secure Innovation
The resource guide discusses the data security challenges in the Retail sector, the real-world risk scenarios retail businesses face and how DSPM can play...
DSPM vs Legacy Security Tools: Filling the Data Security Gap View More
September 30, 2025
DSPM vs Legacy Security Tools: Filling the Data Security Gap
The infographic discusses why and where legacy security tools fall short, and how a DSPM tool can make organizations’ investments smarter and more secure.
Operationalizing DSPM: 12 Must-Dos for Data & AI Security View More
September 22, 2025
Operationalizing DSPM: 12 Must-Dos for Data & AI Security
A practical checklist to operationalize DSPM—12 must-dos covering discovery, classification, lineage, least-privilege, DLP, encryption/keys, policy-as-code, monitoring, and automated remediation.
The DSPM Architect’s Handbook View More
June 16, 2025
The DSPM Architect’s Handbook: Building an Enterprise-Ready Data+AI Security Program
Get certified in DSPM. Learn to architect a DSPM solution, operationalize data and AI security, apply enterprise best practices, and enable secure AI adoption...
Gencore AI and Amazon Bedrock View More
January 7, 2025
Building Enterprise-Grade AI with Gencore AI and Amazon Bedrock
Learn how to build secure enterprise AI copilots with Amazon Bedrock models, protect AI interactions with LLM Firewalls, and apply OWASP Top 10 LLM...
What's
New