The Texas Legislature passed House Bill 4 in 2023, enacting the Texas Data Privacy and Security Act (DPSA). As part of the act, the Texas Department of Information Resources (DIR) was required to build an online portal for public outreach, allowing residents to provide feedback and recommended revisions. DIR officially launched its public portal June 24, 2024, and will keep it open through Sept. 30, 2024.
The DPSA regulates how business entities collect, use, process and treat personal data, effective July 1, 2024. It effectively protects consumer data, providing specific rights over how much access business entities have over personal data. Through the law, consumers must provide consent before businesses can process any “sensitive” personal data and can opt out of personal data processing.
The ruling applies to the sale of personal information as well, requiring clear notice and consent requests from consumers before it can be sold. Businesses must also provide additional notices for the sale of biometric personal data. In addition, businesses must also respond to requests for access and correction of information.
DIR is inviting residents to share their experiences in exercising their rights and implementing the act’s requirements through the portal. The agency will use the comments to prepare a report to the Texas Legislature detailing the status of the DPSA’s implementation, requirements of the act and recommendations for how it can be improved.