# [Manage privacy requirements of the Texas Data Privacy and Security Act (TDPSA)](https://usercentrics.com/tdpsa/)

**Handle privacy notices, opt-outs, and evolving U.S. state privacy rules with the Usercentrics Consent Management Platform (CMP). Display a fully customizable cookie banner that supports Texas TDPSA requirements — without breaking analytics, ads, or revenue.**

[Start free](https://usercentrics.com/free-trial/) · [Contact Sales](https://usercentrics.com/book-a-consultation/)

---

## What is the TDPSA?

The Texas Data Privacy and Security Act (TDPSA) is a comprehensive consumer privacy law that took effect on July 1, 2024. It governs how businesses collect, process, share, and sell the personal data of Texas residents, granting individuals new rights and placing obligations on covered companies. The TDPSA generally does not rely on revenue or data-volume thresholds, which significantly broadens its scope.

[Common TDPSA questions and answers](https://usercentrics.com/knowledge-hub/texas-data-privacy-and-security-act/)

---

## TDPSA at a glance

- Effective date: July 1, 2024
- Applies to: Most businesses serving Texas residents (generally no revenue or data-volume thresholds)
- Texas consumers have rights of access, correction, deletion, portability, non-discrimination, and to opt out of certain data uses.
- Small business carve-out: Many obligations do not apply to qualifying small businesses
- Key requirements: Privacy notices, opt-outs, opt-in required for sensitive/children's data
- Enforcement: Texas Attorney General, up to $7,500 per violation
- Cure period: Businesses receive a 30-day right to cure after notice before enforcement action

---

## What does the TDPSA require from businesses?

To meet TDPSA requirements, businesses must provide clear, up-to-date privacy notices that explain how personal data is collected, used, shared, or sold. They must offer easy-to-use opt-out mechanisms, such as a cookie banner, for the sale of personal data, targeted advertising, and certain profiling activities, and obtain affirmative opt-in consent before processing sensitive personal data, including children's data.
Businesses are also expected to respond to consumer rights requests, and put reasonable security measures in place to protect personal data throughout its lifecycle.

---

## What are the risks of ignoring the TDPSA?

Failing to meet TDPSA requirements can expose businesses to enforcement action by the Texas Attorney General, including civil penalties of up to $7,500 per violation. Beyond fines, gaps in consent handling, opt-out controls, or required notices can increase legal exposure, disrupt advertising and data-driven revenue, and undermine customer trust. As privacy expectations rise across the U.S., inadequate data practices may also lead to reputational damage, reduced user engagement, and lost business opportunities in the Texas market.

**How a cookie banner helps your website perform**

**Reliable tracking you can trust**

Analytics and ads behave predictably based on real user choices. A well-configured cookie banner helps prevent broken tracking, data gaps, and last-minute fixes — your insights stay dependable.

**Less work, fewer surprises**

Automatic cookie scanning and updates keep your banner accurate as your site and legal requirements change. Less manual upkeep, fewer headaches, and more time for your team to focus on growth.

**A better first impression**

A clear, customized cookie banner keeps your visitors informed and gives them clear choices. The result: less friction, more trust, and mitigated legal risk from the very first visit.

**Protect revenue as privacy rules change**

A flexible cookie banner and consent management platform helps you adapt as privacy expectations and state laws evolve — and as your company grows. You stay in control of tracking and monetization without scrambling to rework setups or risking interruptions.

> "Customers appreciate the ability to know what is being shared and that we are transparent with where it's shared. Our internal teams are satisfied that we now provide users with a solution that helps us reach compliance with US privacy laws and mitigate our exposure to fines related to noncompliance."
>
> — Andrew Scheidl, Web Developer at DaBella

[Read full review](https://usercentrics.com/resources/case-study-dabella/)

---

**Get your websites and apps ready for Texas privacy rules**

Make it easy to provide website visitors and app users with clear notice and real choice — without disrupting analytics or ads. Try Usercentrics for free and address legal and operational risk as privacy expectations evolve.

[Start free](https://usercentrics.com/pricing/)

---

## Talk to our privacy experts

Usercentrics helps Texas businesses give visitors clear notice and meaningful choice — without slowing down websites or apps, analytics, or advertising. Whether you're preparing for TDPSA requirements or managing multiple U.S. and global privacy laws, we'll help you protect your business and find the right setup for your website.

- Stable tracking and marketing performance as privacy rules evolve
- Automated setup and updates that minimize ongoing maintenance
- Address legal and operational risk with a single, scalable platform

[Contact sales](https://usercentrics.com/book-a-consultation/)

---

## Learn more

**[Texas Data Privacy and Security Act (TDPSA) Checklist](https://usercentrics.com/resources/tdpsa-checklist/)** — Checklist · May 29, 2025

Our TDPSA compliance checklist will help you achieve and maintain privacy compliance. Build user trust and achieve high opt-in rates.

**[U.S. data privacy laws by state: rights and requirements](https://usercentrics.com/knowledge-hub/us-data-privacy-laws-by-state/)** — Article · Feb 7, 2025

In 2025 more US state privacy laws will come into effect than in any previous year, though federal legislation remains stalled. We compare what US state-level data privacy laws mean for consumers and businesses.

**[COPPA Compliance: Key Requirements for 2026](https://usercentrics.com/knowledge-hub/coppa-compliance/)** — Article · Apr 29, 2026

Compliance with the Children's Online Privacy Protection Act (COPPA) is required for any business handling the personal information of children under age 13 in the United States. This article discloses the key provisions of COPPA to help organizations take the necessary steps to achieve and maintain compliance and build trust with families.

---

## Frequently asked questions

### Who does the TDPSA apply to?

The Texas Data Privacy and Security Act (TDPSA) applies to most businesses that conduct business in Texas or offer products or services consumed by Texas residents and that process or sell personal data. Unlike some other U.S. privacy laws, the TDPSA does not include revenue or data-volume thresholds, which means it applies to a much broader range of companies, though it does exclude small businesses as defined by the U.S. Small Business Administration for many obligations.

### What rights do Texas residents have under the TDPSA?

Under the TDPSA, Texas residents have the right to:

- Access and confirm whether their personal data is being processed
- Correct inaccuracies in their personal data
- Request deletion of personal data
- Obtain a portable copy of their data
- Opt out of the sale of personal data, targeted advertising, and certain profiling activities

Businesses must provide clear, accessible ways for consumers to exercise these rights.

### What are the penalties for violating the TDPSA?

Violations of the TDPSA may result in civil penalties of up to $7,500 per violation. Before enforcement action is taken, businesses are granted a 30-day period to cure alleged violations after receiving notice. The Texas Data Privacy and Security Act does not provide a private right of action; enforcement is handled exclusively by the Texas Attorney General.

### What notices are required under the TDPSA?

Businesses must provide up-to-date privacy notices explaining:

- What personal data is collected
- How the data is used, shared, or sold
- How consumers can exercise their rights

If a business sells sensitive or biometric data, it must also display specific statutory notices, such as: "NOTICE: We may sell your sensitive personal data."

### How does the TDPSA differ from other U.S. privacy laws?

The TDPSA differs from laws like the California Consumer Privacy Act (CCPA) in several important ways, including:

| Topic | TDPSA | CCPA |
| --- | --- | --- |
| Applicability trigger | Applies to businesses conducting business in Texas or producing products/services consumed by Texas residents (as a result captures more businesses) | Applies only if specific revenue, data volume, or revenue-from-data thresholds are met |
| Revenue threshold | None (subject to small business exceptions) | Yes (annual gross revenue exceeding $26.2M for the preceding calendar year) |
| Data minimization standard | Data collected and processed must be adequate, relevant, and reasonably necessary. | Broader purpose limitation, less prescriptive minimization language |
| Sensitive data (including children's) | Opt-in required and display of notice and link if sensitive personal data is sold: "NOTICE: We may sell your sensitive personal data." | Opt-in required and display of link if sensitive personal information is processed: "Limit the Use of My Sensitive Personal Information" |
| Enforcement | Exclusively by the Texas Attorney General | California Attorney General and the California Privacy Protection Agency (CCPA or CalPrivacy) |
| Cure period | 30-day right to cure. Does not expire. | Generally none |
| Private right of action (individual lawsuits for violations) | No | Yes (only for data breaches) |
| Small business exemption | Yes (independent for-profit companies <500 employees) | Generally no, subject to revenue requirements |

---

## Products
- [Usercentrics Web CMP](https://usercentrics.com/website-consent-management/)
- [Usercentrics App CMP](https://usercentrics.com/in-app-sdk/)
- [Usercentrics CTV CMP](https://usercentrics.com/usercentrics-ctv-cmp/)
- [Privacy Policy Generator](https://usercentrics.com/privacy-policy-generator/)
- [Server-side Tagging Solution](https://usercentrics.com/server-side-tracking-solution/)
- [Preference Manager](https://usercentrics.com/preference-management/)
- [Audience Unlocker](https://usercentrics.com/audience-unlocker/)
- [Integrations](https://usercentrics.com/integrations/)
- [Web Compliance Scan](https://usercentrics.com/privacy-compliance-scanner/)
- [App Compliance Scan](https://usercentrics.com/app-data-privacy-audit/)
- [ROAS Calculator](https://usercentrics.com/roas-calculator/)

## Solutions
- [Data Privacy Regulatory Compliance](https://usercentrics.com/data-privacy-regulatory-compliance/)
- [Marketing Performance Optimization](https://usercentrics.com/marketing-performance-optimization/)
- [Migration](https://usercentrics.com/migration/)
- [Media & Publishing](https://usercentrics.com/media-publishing/)
- [Retail & Ecommerce](https://usercentrics.com/retail-ecommerce/)
- [Banking, Finance & Insurance](https://usercentrics.com/banking-finance-insurance/)
- [Healthcare & Pharmaceuticals](https://usercentrics.com/healthcare-pharmaceuticals/)
- [Gaming](https://usercentrics.com/gaming/)
- [Education](https://usercentrics.com/education/)
- [Automotive](https://usercentrics.com/automotive/)
- [Travel & Hospitality](https://usercentrics.com/travel/)

## Regulations & Frameworks
- [GDPR (EU)](https://usercentrics.com/gdpr/)
- [GDPR (UK)](https://usercentrics.com/uk-gdpr/)
- [CCPA (California)](https://usercentrics.com/ccpa/)
- [TCF v2.3 (IAB)](https://usercentrics.com/cmp-for-publishers/)
- [DMA (EU)](https://usercentrics.com/digital-markets-act-dma/)
- [Amazon Consent Signal](https://usercentrics.com/usercentrics-cmp-and-amazon-consent-signal/)
- [Google Consent Mode (EU)](https://usercentrics.com/usercentrics-cmp-and-google-consent-mode-v2/)
- [Microsoft UET Consent Mode (EU)](https://usercentrics.com/usercentrics-cmp-and-microsoft-consent-mode/)
- [Microsoft Clarity Consent Mode](https://usercentrics.com/usercentrics-cmp-and-microsoft-clarity-consent-mode/)
- [View all regulations](https://usercentrics.com/regulations-and-frameworks/)

## Resources
- [Blog](https://usercentrics.com/knowledge-hub/)
- [Whitepapers](https://usercentrics.com/whitepapers/)
- [Checklists](https://usercentrics.com/checklists/)
- [Courses](https://courses.usercentrics.com/)
- [Case Studies](https://usercentrics.com/case-studies/)
- [Privacy-Led Marketing](https://usercentrics.com/privacy-led-marketing/)
- [Events](https://usercentrics.com/webinar/)
- [CONSENTED Podcast](https://usercentrics.com/consented/)
- [Guides](https://usercentrics.com/guides/)
- [Release Notes](https://releases.usercentrics.com/en)
- [Developer Documentation](https://usercentrics.com/docs/)
- [RFI Template](https://usercentrics.com/resources/usercentrics-rfi-template/)
- [Customer Directory](https://usercentrics.com/usercentrics-customer-directory/)

## Company
- [About Us](https://usercentrics.com/about-us/)
- [Press](https://usercentrics.com/press/)
- [Our Offices](https://usercentrics.com/contact/)
- [Trust Center](https://trust.usercentrics.com/)
- [Careers](https://usercentrics.com/career/)
- [Open Positions](https://apply.workable.com/usercentrics/)
- [Diversity & Inclusion](https://usercentrics.com/dei/)

## Support
- [General Support](https://support.usercentrics.com/hc/en-us)
- [Contact Sales](https://usercentrics.com/book-a-consultation/)
- [Technical Support](https://support.usercentrics.com/hc/en-us/requests/new)
- [Billing & Account](https://support.usercentrics.com/hc/en-us/categories/12253804608156-Account-and-billing)
- [Suggest a Feature](https://support.usercentrics.com/hc/en-us/requests/new?ticket_form_id=10610312381340)
- [Partner Login](https://partnerportal.usercentrics.com/)
- [Partner Program](https://usercentrics.com/partner-program-overview/)
- [Affiliate Program](https://usercentrics.com/affiliates/)

## Legal
- [Terms & Conditions](https://usercentrics.com/terms-and-conditions/)
- [Terms & Conditions USA](https://usercentrics.com/terms-and-conditions-usa/)
- [Privacy Policy](https://usercentrics.com/privacy-policy/)
- [Legal Notice](https://usercentrics.com/legal-notice/)
- [Legal Documents](https://usercentrics.com/legal-documents/)
- [Accessibility Statement](https://usercentrics.com/accessibility-statement-wcag-compliance/)

© 2026 Usercentrics GmbH