Announcing Agent Commander - The First Integrated solution from Veeam + Securiti.ai enabling the scaling of safe AI agents

View
Veeam

The Funniest Evening at RSA with Hasan Minhaj

Hasan Minhaj Request ticket
View
Contact Us See a demo

Texas’s Data Privacy and Security Act (TDPSA)

Last Updated on June 25, 2024

Schedule Your
Personal Demo

Learn how you can leverage Securiti’s Data Command Center to address data security, privacy, governance, and compliance.

See a demo
Schedule your demo today

Texas’s Data Privacy and Security Act (TDPSA) was enacted on 18 June 2023 and is expected to come into effect on 1 July 2024. Thus, Texas officially became the 11th state in the US to have a comprehensive regulation on data privacy.

The TDPSA contains all the necessary provisions to ensure all consumers and their personal data are afforded appropriate protection while also being flexible enough for businesses to continue their operations without a major overhaul of their data management practices being necessary.

The law applies to all entities that conduct business in Texas or produce products or services specifically catering to Texas residents, engage in the sale of personal data. The law does not apply to small businesses as defined by the United States Small Business Administration unless you engage in the sale of sensitive data without the consent of the consumer. Key obligations for organizations subject to the TDPSA include data minimization, protection for sensitive data, transparent privacy notice, and thorough and regular data protection assessments.

The Solution

Securiti empowers organizations to ensure compliance with each provision of Texas’ Data Privacy and Security Act (TDPSA) with its plethora of products, which include, but are not limited to, AI-driven data discovery, DSR automation, universal consent management, autonomous documented accountability, data breach management, and vendor risk assessment.
Each of the solutions mentioned above is backed up by state-of-the-art artificial intelligence and machine-learning-based algorithms, making Securiti a market leader in providing data compliance and governance solutions.

Panama’s PDPL Solutiion

Request a demo today to learn how Securiti can help you and your organization comply with Texas’ TDPSA.

Readiness Assessment

TDPSA Provisions

Automate regular internal assessments of various internal data-related activities and mechanisms to evaluate their effectiveness and make appropriate adjustments with our collaborative, multi-regulation, readiness assessment system per TDPSA requirements.

Readiness securiti
Texas

Auto Compliance Management

TDPSA Provisions

Automate compliance with TDPSA using Securiti common controls and tests.

Privacy Notice Management

Section(s): 541.102

Automate the generation and regular refresh of a privacy policy that adequately informs the users about your organization's data processing practices while being fully compliant with all applicable provisions of law with pre-built templates in compliance with the TDPSA.

Privacy Notice Management
Universal Consent Management

Universal Consent Management

Section(s): 541.005, 541.101(b)(1), 541.101(b)(4), 541.107

Ensure compliance with the TDPSA’s consent-related provisions across all major data processing activities by monitoring users' consent status via a central dashboard. Doing so allows organizations to prevent any processing or potential transfer, sharing, or selling of data to third parties unless explicitly consented to by the users.

Cookie Consent Management

Section(s): 541.051(b)(5), 541.101(b)(1), 541.101(b)(4), 541.103, 541.107

Automate your organization's entire cookie consent management to ensure all cookies used across the data infrastructure comply with the legal requirements. Additionally, scan your website to classify cookies, deploy customized consent collection points, and link consent to individual users.

Cookie Consent
Panama Automate People Data Graph securiti

Sensitive Data Intelligence

Section(s): 541.001(3), 541.001(12), 541.001(14), 541.001(19), 541.001(21), 541.001(25), 541.001(26), 541.001(27), 541.001(29)

Leverage dedicated data mapping, classification, and cataloging modules to ensure you gain real-time insights related to your organization’s entire personal and sensitive data infrastructure via visualization of data sprawl.

Data Mapping Automation

Section(s): 541.052(f)(1), 541.101, 541.103, 541.104

Trace, classify & label data within your organization's data infrastructure to ensure appropriate security controls are enabled on the most sensitive data in your organization. Leverage the same module to identify sensitive files such as consent forms and financial statements and record them under appropriate categories.

Data mapping
DSR

Data Subject Rights Fulfillments

Section(s): 541.051, 541.052, 541.053, 541.054, 541.055

Automate the entire process related to fulfilling consumer data rights-related requests with customized web forms and DSR request verification to gain real-time updates on the status of each request via the central dashboard.

Data Breach Management

Section(s): 541.104(a)(2)

Track, manage, and mitigate potential data security incidents while automating data breach response notifications to all affected stakeholders as soon as legally obliged by leveraging a knowledge database on security incident diagnosis and response per global regulatory requirements.

Panama Assess Data Protection Measures securiti
Panama Automate Records of Processing Activities securiti

Data Protection Assessment Automation

​​Section(s): 541.105(a)

Automate data protection assessments (DPAs) by leveraging pre-built compliance templates, review responses, track each assessments’ individual progress in real time, and share assessments’ insights and results with third parties.

Vendor Assessments

Section(s): 541.104

Track all the organization's third-party vendors' relevant data processing activities in real-time to ensure their data processing practices related to shared data comply with the relevant regulatory requirements.

Vendor Management
Data Security Posture

Data Security Posture Management

Section(s): 541.101(a)(2)

Gain comprehensive visibility into potential misconfigurations in data assets across public clouds, data clouds, SaaS, and on-premises environments, in addition to contextual data insights, including people ownership, regulatory obligations, and security and privacy metadata.

Key Rights Under Texas’ TDPSA

Like most data privacy regulations, Texas’ TDPSA empowers all users with the following consumer data rights:

Right to Access

Consumers have the right to confirm whether a controller is processing their personal data and to access that data subsequently.

Right to Correction

Consumers have the right to correct any inaccuracies in their personal data, regardless of the nature of the data and the purpose for which it was collected.

Right to Deletion

Consumers have the right to request any collected personal data be deleted.

Right to Portability

Consumers have the right to request a copy of their personal data provided in a portable and readily usable format that can be transmitted to another controller without any issues.

Right to Opt-Out of Processing

Consumers have the right to opt out of the processing of their data altogether if the processing is for the following purposes:

  • Targeted advertising;
  • Sale of personal data;
  • Profiling for purposes of a decision that produces a legal consequence for the consumer.

Facts Related to Texas’ TDPSA

Here are some important facts related to Texas’s Data Privacy and Security Act (TDPSA):

1

Organizations must gain explicit consent to process sensitive personal data, which includes data like genetic, biometric, and precise geolocation data, among others;

2

The Texas Attorney General’s office has the exclusive regulatory authority to enforce the TDPSA;

3

Any entity found in violation of the TDPSA is liable for a civil penalty amount not exceeding $7,500 for each violation;

4

The TDPSA does not provide a basis for a private right of action for a violation of any of its provisions;

5

The TDPSA comes into effect on 1 July 2024, allowing subject organizations ample time to ensure compliance.

Analyze this article with AI

ChatGPT Claude Perplexity Grok
Prompts open in third-party AI tools.
IDC MarketScape

Securiti named a Leader in the IDC MarketScape for Data Privacy Compliance Software

Read the Report
Please enter a minimum of 3 characters to begin your search.

Type

Videos
View More
March 9, 2026
Rehan Jalil, Veeam on Agent Commander : theCUBE + NYSE Wired: Cyber Security Leaders
Following Veeam’s acquisition of Securiti, the launch of Agent Commander marks an important step toward helping enterprises adopt AI agents with greater confidence. In...
View More
January 20, 2025
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
January 15, 2025
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
January 2, 2025
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
December 24, 2024
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
November 1, 2024
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
October 29, 2024
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
August 12, 2024
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
June 3, 2024
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
January 29, 2024
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...

Spotlight Talks

Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Latest
View More
February 24, 2026
Introducing Agent Commander
The promise of AI Agents is staggering— intelligent systems that make decisions, use tools, automate complex workflows act as force multipliers for every knowledge...
Risk Silos: The Biggest AI Problem Boards Aren’t Talking About View More
February 18, 2026
Risk Silos: The Biggest AI Problem Boards Aren’t Talking About
Boards are tuned in to the AI conversation, but there’s a blind spot many organizations still haven’t named: risk silos. Everyone agrees AI governance...
Largest Fine In CCPA History_ What The Latest CCPA Enforcement Action Teaches Businesses View More
February 23, 2026
Largest Fine In CCPA History: What The Latest CCPA Enforcement Action Teaches Businesses
Businesses can take some vital lessons from the recent biggest enforcement action in CCPA history. Securiti’s blog covers all the important details to know.
View More
February 19, 2026
AI & HIPAA: What It Means and How to Automate Compliance
Explore how the Health Insurance Portability and Accountability Act (HIPAA) applies to Artificial Intelligence (AI) in securing Protected Health Information (PHI). Learn how to...
California’s Delete Request and Opt-out Platform (DROP) and the Delete Act View More
March 11, 2026
California’s Delete Request and Opt-out Platform (DROP) and the Delete Act
Understand California’s DROP platform and the Delete Act, including compliance timelines, the 45-day cycle, broker obligations, and how to operationalize compliance.
Building A Secure AI Foundation For Financial Services View More
March 3, 2026
Building A Secure AI Foundation For Financial Services
Access the whitepaper and discover how financial institutions eliminate Shadow AI, enforce real-time AI policies, and secure sensitive data with a unified DataAI control...
Emerging AI Security Trends For 2026 View More
March 11, 2026
Emerging AI Security Trends For 2026
Securiti’s latest infographic provides security leaders with a walkthrough of all the emerging AI security trends for 2026 to help them assess and plan...
Safe AI, Accelerated: View More
March 11, 2026
Safe AI, Accelerated: Securing Data & AI Across the Lifecycle
Securiti’s latest infographic dives into the issue organizations face when scaling their AI projects safely, and how best they can address those challenges.
View More
February 18, 2026
Take the Data Risk Out of AI
Learn how to prepare enterprise data for safe Gemini Enterprise adoption with upstream governance, sensitive data discovery, and pre-index policy controls.
View More
December 22, 2025
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
What's
New