Texas Business & Commerce Code
§ 541.101 — CONTROLLER DUTIES; TRANSPARENCY
BC § 541.101Title 11. PERSONAL IDENTITY INFORMATION · Part C. CONSUMER DATA PROTECTION · Ch. 541. CONSUMER DATA PROTECTION · Art. C. CONTROLLER AND PROCESSOR DATA-RELATED DUTIES AND PROHIBITIONS
Statute text
View on source(a)A controller:
(1)shall limit the collection of personal data to what is adequate, relevant, and reasonably necessary in relation to the purposes for which that personal data is processed, as disclosed to the consumer; and
(2)for purposes of protecting the confidentiality, integrity, and accessibility of personal data, shall establish, implement, and maintain reasonable administrative, technical, and physical data security practices that are appropriate to the volume and nature of the personal data at issue.
(b)A controller may not:
(1)except as otherwise provided by this chapter, process personal data for a purpose that is neither reasonably necessary to nor compatible with the disclosed purpose for which the personal data is processed, as disclosed to the consumer, unless the controller obtains the consumer's consent;
(2)process personal data in violation of state and federal laws that prohibit unlawful discrimination against consumers;
…
Legislative history
Added by Acts 2023, 88th Leg., R.S., Ch. 995 (H.B. 4), Sec. 2, eff. July 1, 2024.