Texas privacy rights and data removal
Texas has both a comprehensive privacy law and a public data-broker registry, which puts it among the stronger US states for privacy protection. Here is what you can do with it.
At a glance
- Comprehensive privacy law? Yes. Texas Data Privacy and Security Act (TDPSA)
- In effect since July 1, 2024
- Your core rights Access, correct, delete, portability, and 4 more
- Law requires honoring Global Privacy Control? Yes, for covered businesses
- Data-broker registry? Yes
- Can you sue? (private right of action) No
- Enforced by Texas Attorney General
Request scope in Texas
Texas recognizes an authorized agent for covered opt-out requests under the Texas Data Privacy and Security Act (TDPSA). Agent eligibility depends on the request type, authorization, verification and the business’s coverage under the law. This legal framework does not establish that a service currently files a particular request.
Texas's agent right covers opt-outs rather than deletion. Check the covered business’s direct deletion process and any verification it requires; do not assume an opt-out authorization establishes deletion authority.
One limit: Texas keeps opt-outs of profiling outside the agent right. Check the direct request process for profiling separately.
Basis: Tex. Bus. & Com. Code § 541.001 et seq.; § 541.055(e). Reviewed September 1, 2026. How the three groups work: our authorized-agent framework.
Your rights in Texas
Texas residents are protected by the Texas Data Privacy and Security Act (TDPSA).
- Right to access and know. Request a copy of the personal information a company holds about you.
- Right to correct. Ask a company to fix inaccurate personal information.
- Right to delete. Ask a company to delete your personal information.
- Right to data portability. Get your data in a portable format you can take elsewhere.
- Right to opt out of sale. Tell a company to stop selling your personal information.
- Right to opt out of targeted advertising. Stop ads targeted at you based on your personal data.
- Right to opt out of profiling. Stop companies from building a behavioral profile of you.
- Right to appeal. Challenge a company's decision to deny your privacy request.
Does this cover the company that has my data?
Coverage depends on the business and on the law’s applicability tests and exemptions. The TDPSA applies to any business that operates in Texas or sells to Texas residents, processes or sells personal data, and is not a small business under the US Small Business Administration definition.
Because it uses that small-business test instead of a fixed number of consumers or dollars of revenue, the law reaches far more companies than most state privacy laws.
- Since January 1, 2025, covered businesses must recognize universal opt-out signals like Global Privacy Control.
- HB 5081, effective September 1, 2025, lets certain judicial officials and staff require brokers to take down their home address and contact details.
- The Texas Attorney General is actively enforcing against data brokers.
How to remove yourself from data brokers in Texas
Texas gives you more tools than most states. Here they are, strongest first.
1. Use the data-broker registry
Texas requires data brokers to register with the state. The public registry shows which companies collect and sell your information and gives you a starting point for opt-out requests. Texas does not offer California's single-request deletion, so you contact each broker separately.
2. Enable Global Privacy Control
Global Privacy Control sends an opt-out preference to websites you visit. Its effect depends on an applicable law or the business’s voluntary policy. It does not request deletion or confirm that a broker removed a listing.
3. Submit direct opt-out requests
For brokers not in the registry or covered by GPC, submit requests directly. Look for the "Do Not Sell My Personal Information" link in the site's footer. You can also send access, deletion, or correction requests through each company's privacy policy page.
Covered companies must respond within the deadline the TDPSA sets. If they don't, you can file a complaint with the Texas Attorney General.
4. Check for reappearance
A broker may later ingest a new record from public records, data-sharing networks, or commercial databases. Re-listing timing varies by broker and source, so periodic checks matter.
Check the exact listing and the provider’s current privacy instructions. Rights depend on residence, request type, business coverage and exemptions. A scan, opt-out preference or submission receipt does not establish deletion.
Run a free scan →Texas's data broker law: what it means for you
Texas requires data brokers to register with the state, so the registry shows who is collecting and selling your information. Each registered broker must:
- Register with the Texas Secretary of State each year and pay a $300 fee, with a $300 annual renewal.
- Post a clear notice on its site or app stating that it is a data broker.
- Maintain a comprehensive information security program.
The Secretary of State only collects the filings. The Texas Attorney General enforces the law, with civil penalties of at least $100 per day per violation plus any unpaid fees.
Other privacy protections in Texas
Beyond the comprehensive privacy law, two Texas protections may apply to you:
- Address protection for judicial officials. HB 5081, effective September 1, 2025, lets judges, court clerks, and judicial-branch staff require data brokers to take down their home address and other personal details.
- Biometric data. The Capture or Use of Biometric Identifier Act (CUBI) covers data like fingerprints and face geometry. The Attorney General enforces it, with civil penalties up to $25,000 per violation, and there is no private right of action.
How to file a privacy complaint in Texas
File with the Texas Attorney General, Consumer Protection Division. To look up brokers, use the Texas Secretary of State data-broker registry.
The Attorney General enforces in the aggregate, investigating patterns rather than resolving individual disputes. Your complaint still matters: it adds to the record that drives enforcement.
Frequently asked questions
Does Texas have a data privacy law?
Yes. Texas residents are protected by the Texas Data Privacy and Security Act (TDPSA), which gives you rights to access, delete, and control your personal data.
Can I sue a company for violating my privacy in Texas?
Generally no. The TDPSA has no private right of action; the Texas Attorney General enforces it. You cannot sue for most violations.
How do I opt out of data brokers in Texas?
Check the exact listing and the provider’s current privacy instructions. Rights depend on residence, request type, business coverage and exemptions. A scan, opt-out preference or submission receipt does not establish deletion.
Does Texas require websites to honor Global Privacy Control?
Yes. Texas law requires covered businesses to treat Global Privacy Control as a valid opt-out request. GPC does not request deletion or confirm that a listing was removed.
Is there a data broker registry in Texas?
Yes. Texas requires data brokers to register with the state. The public registry lets you see which brokers are collecting and selling personal information.
Sources
This page is privacy-rights information, not legal advice. Privacy law changes often; verify current rules with your state privacy agency or a licensed attorney before acting. Later edits corrected specific statements; no full legal re-review is recorded.