Texas TDPSA

Texas Data Privacy and Security Act - controller obligations, consumer rights, sensitive data.


Short name	TX TDPSA
Region	Americas
Country or scope	United States
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers TX TDPSA

Scan requirements: 6, all decided by a scan.
Controls: the scan requirements below, plus 9 controls from Safeguard's control catalog for TX TDPSA.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 25: 3 written for TX TDPSA and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`TX-TDPSA-101-SEC` Data Security Practices	Controllers must establish, implement and maintain reasonable administrative, technical and physical data security practices appropriate to the volume and nature of the personal data at issue; verifiable integrity of processing software evidences this (Tex. Bus. & Com. Code § 541.101)	Scan
`TX-TDPSA-101-MIN` Collection Limitation Accountability	Collection is limited to what is adequate, relevant and reasonably necessary for the disclosed purpose; demonstrating this requires a named processing platform with its software components enumerated (Tex. Bus. & Com. Code § 541.101)	Scan
`TX-TDPSA-104` Processor Obligations	Processors must assist controllers and operate under contracts specifying instructions, data categories and downstream flow-through to subcontractors; each third-party component should carry a named supplier (Tex. Bus. & Com. Code § 541.104)	Scan
`TX-TDPSA-105` Data Protection Assessments	Documented assessments are required for targeted advertising, sale, profiling with foreseeable risk, and sensitive data processing; credible assessment requires the versions of the involved software to be recorded (Tex. Bus. & Com. Code § 541.105)	Scan
`TX-TDPSA-051` Consumer Rights Fulfilment	Consumers may confirm processing, access, correct, delete, port their data and opt out of targeted advertising, sale and profiling; those requests can only be executed if the processing components are unambiguously identifiable (Tex. Bus. & Com. Code § 541.051)	Scan
`TX-TDPSA-NOTICE` Privacy Notice Documentation	Controllers must post a reasonably accessible and clear privacy notice including categories processed, sharing, and sale of sensitive or biometric data; supporting system documentation should be identified and timestamped (Tex. Bus. & Com. Code ch. 541 privacy-notice provisions)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`TX-BC-541.052`	Consumer Rights: Access, Correction, Deletion & Portability
`TX-BC-541.053`	Opt-Out of Sale, Targeted Advertising & Profiling
`TX-BC-541.054`	Sensitive Data: Opt-In Consent
`TX-BC-541.101`	Data Protection Assessment
`TX-BC-541.102`	Processor Agreements
`TX-BC-541.051`	Privacy Notice & Transparency
`TX-BC-541.055`	Consumer Appeals
`TX-BC-541.103`	Controller Duties: Security & Minimization
`TX-BC-541.201`	Universal Opt-Out Mechanism

Policy templates

Written for TX TDPSA:

Texas TDPSA State Privacy Notice
Texas TDPSA Sensitive Data Consent Policy
Texas TDPSA Data Protection Assessment Procedure

And 22 from the standard set, adapted to TX TDPSA.