Effective July 1, 2024, the Texas Data Privacy and Security Act (TDPSA) is similar to the state privacy laws in Virginia, Utah, and Iowa, among others, but several notable provisions exist. These include a “small business” carveout, consent to process sensitive data, notices for the sale of sensitive personal data, a requirement to recognize the universal opt-out mechanism, and a cure period with no sunset.
