{"id":18030,"date":"2026-03-17T13:23:47","date_gmt":"2026-03-17T12:23:47","guid":{"rendered":"https:\/\/stage.usercentrics.com\/us\/tdpsa\/"},"modified":"2026-03-17T13:25:01","modified_gmt":"2026-03-17T12:25:01","slug":"tdpsa","status":"publish","type":"page","link":"https:\/\/usercentrics.com\/us\/tdpsa\/","title":{"rendered":"TDPSA Privacy Requirements for Websites &#038; Apps"},"content":{"rendered":"<div class=\"alignfull uc-blog-hero uc-blog-hero--has-image uc-blog-hero--layout-product uc-blog-hero--sticky-image uc-ctx--blue\" data-id=\"blog_hero_69d23c0be8d76\">\n        <div class=\"uc-blog-hero__inner\">\n        <div class=\"uc-blog-hero__text\">\n                                            <h1 class=\"uc-blog-hero__title like-h1-upper no-default-margin\">Manage privacy requirements of the Texas Data Privacy and Security Act (TDPSA)<\/h1>                                    <div class=\"uc-blog-hero__description\">Handle privacy notices, opt-outs, and evolving U.S. state privacy rules with the Usercentrics Consent Management Platform (CMP). Display a fully customizable cookie banner that supports Texas TDPSA requirements \u2014 without breaking analytics, ads, or revenue.<\/div>\n                                                                                    <div class=\"uc-blog-hero__buttons\">\n                        <a id=\"1825cd36-34f8-4200-81b8-f21faef4f7ab\" class=\"uc-button uc-button-size-l uc-button-contained  no-default-link-decoration\" href=\"\/free-trial\/\" target=\"\"><span>Start free<\/span><\/a><a id=\"d9724daa-ee47-454a-b082-eaf94b17a93d\" class=\"uc-button uc-button-size-l uc-button-outlined  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/book-a-consultation\/\" target=\"\"><span>Contact Sales<\/span><\/a>                    <\/div>\n                                                                        <\/div>\n                            <div class=\"uc-blog-hero__background\">\n                                                                    <div class=\"uc-blog-hero__image-wp\">\n                                                                                                                        <img decoding=\"async\" fetchpriority='high'class=\"uc-blog-hero__image\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2026\/03\/TDPSA-Hero-Usercentrics.svg?v=e02ec39ffebcdd73\" width=\"740\" height=\"444\" alt=\"\">                                                                                                        <\/div>\n                                                                            <\/div>\n                    <\/div>\n            <script>\n            document.addEventListener('DOMContentLoaded', () => {\n                new BlogHeroStickyImage(\n                    document.querySelector('[data-id=\"blog_hero_69d23c0be8d76\"]')\n                )\n            });\n        <\/script>\n    <\/div>\n\n\n<div class=\"bg-brand-primary-dark uc-flex-row--background-right alignfull uc-ctx--dark\" style=\"\" ><div class=\"uc-flex-row container\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: var(--wp--preset--spacing--10-xl);\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-6);--i:1;\">\n    \n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\">\n<h2 class=\"wp-block-heading\" id=\"h-what-is-the-tdpsa-0\" style=\"margin-bottom:var(--wp--preset--spacing--3-xl)\"><strong>What is the TDPSA?<\/strong><\/h2>\n<\/div>\n\n\n\n<p class=\"is-style-text-lg\">The Texas Data Privacy and Security Act (TDPSA) is a comprehensive consumer privacy law that took effect on July 1, 2024. It governs how businesses collect, process, share, and sell the personal data of Texas residents, granting individuals new rights and placing obligations on covered companies. The TDPSA generally does not rely on revenue or data-volume thresholds, which significantly broadens its scope.<\/p>\n\n\n<a id=\"d4827416-5b05-4447-9cdc-defd5d34c861\" class=\"uc-button uc-button-size-l uc-button-link  no-default-link-decoration uc-button-icon-right\" href=\"\/knowledge-hub\/texas-data-privacy-and-security-act\/\" target=\"\"><span>Common TDPSA questions and answers<\/span> <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M13.8811 18.2974L12.4811 16.8474L16.0311 13.2974H3.8811V11.2974H16.0311L12.4811 7.74736L13.8811 6.29736L19.8811 12.2974L13.8811 18.2974Z\" fill=\"black\"\/>\n<\/svg>\n<\/a>\n<\/div>\n\n<\/div><\/div>\n\n<div class=\"uc-flex-row\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: 0px;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-5);--i:2;\">\n    \n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" height=\"500\" width=\"500\" src=\"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg\" alt=\"Bank icon with various currency coins falling in\" class=\"wp-image-3582\" style=\"object-fit:cover;width:500px;height:500px\"\/><\/figure>\n\n<\/div>\n\n\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-7);--i:3;\">\n    \n\n<h2 class=\"wp-block-heading\" id=\"h-tdpsa-at-a-glance\" style=\"margin-bottom:var(--wp--preset--spacing--5-xl)\">TDPSA at a glance<\/h2>\n\n\n\n<ul class=\"wp-block-list is-style-default\">\n<li>Effective date: July 1, 2024<\/li>\n\n\n\n<li>Applies to: Most businesses serving Texas residents (generally no revenue or data-volume thresholds)<\/li>\n\n\n\n<li>Texas consumers have rights of access, correction, deletion, portability, non-discrimination, and to opt out of certain data uses.<\/li>\n\n\n\n<li>Small business carve-out: Many obligations do not apply to qualifying small businesses<\/li>\n\n\n\n<li>Key requirements: Privacy notices, opt-outs, opt-in required for sensitive\/children\u2019s data<\/li>\n\n\n\n<li>Enforcement: Texas Attorney General, up to $7,500 per violation<\/li>\n\n\n\n<li>Cure period: Businesses receive a 30-day right to cure after notice before enforcement action<\/li>\n<\/ul>\n\n<\/div>\n\n<\/div>\n\n<div class=\"uc-flex-row\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: 0px;--to: -1;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-7);--i:4;\">\n    \n\n<p class=\"like-label-l\">REQUIREMENTS<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-does-the-tdpsa-require-from-businesses\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--5-xl)\">What does the TDPSA require from businesses?<\/h2>\n\n\n\n<p class=\"is-style-text-lg\">To meet TDPSA requirements, businesses must provide clear, up-to-date privacy notices that explain how personal data is collected, used, shared, or sold. They must offer easy-to-use opt-out mechanisms, such as a cookie banner, for the sale of personal data, targeted advertising, and certain profiling activities, and obtain affirmative opt-in consent before processing sensitive personal data, including children\u2019s data.<br>Businesses are also expected to respond to consumer rights requests, and put reasonable security measures in place to protect personal data throughout its lifecycle.<\/p>\n\n<\/div>\n\n\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-5);--i:5;\">\n    \n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" height=\"504\" width=\"504\" src=\"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2025\/10\/ccpa-how.svg\" alt=\"\" class=\"wp-image-15979\" style=\"object-fit:cover;width:500px;height:500px\"\/><\/figure>\n\n<\/div>\n\n<\/div>\n\n<div class=\"uc-flex-row\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: var(--wp--preset--spacing--10-xl);\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-5);--i:6;\">\n    \n\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/usercentrics.com\/wp-content\/uploads\/2024\/09\/Asset-21.svg\" alt=\"Bank icon with various currency coins falling in\" style=\"object-fit:cover;width:500px;height:500px\"\/><\/figure>\n\n<\/div>\n\n\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-7);--i:7;\">\n    \n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"like-label-l\">RISKS<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-are-the-risks-of-ignoring-the-tdpsa\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--5-xl)\">What are the risks of ignoring the TDPSA?<\/h2>\n<\/div>\n\n\n\n<p class=\"is-style-text-lg\">Failing to meet TDPSA requirements can expose businesses to enforcement action by the Texas Attorney General, including civil penalties of up to $7,500 per violation. Beyond fines, gaps in consent handling, opt-out controls, or required notices can increase legal exposure, disrupt advertising and data-driven revenue, and undermine customer trust. As privacy expectations rise across the U.S., inadequate data practices may also lead to reputational damage, reduced user engagement, and lost business opportunities in the Texas market.<\/p>\n\n<\/div>\n\n<\/div>\n\n<div class=\"uc-cards-slider uc-cards-slider--layout-default uc-cards-slider--is-slider uc-ctx--dark\">\n        <div class=\"container\">\n                            <div class=\"uc-cards-slider__heading\">\n                <div class=\"uc-cards-slider__heading__title like-h2 no-default-margin\">\n                    How a cookie banner helps your website perform                <\/div>\n\n                            <\/div>\n                    <div class=\"uc-slider\" id=\"slider_69d23c0bf3ee0\">\n                    <div class=\"uc-slider__actions\">\n                                                    <div class=\"uc-slider__buttons\">\n                        <button type=\"button\" class=\"uc-button uc-button-size-l uc-button-contained\"\n                                aria-label=\"Previous\" disabled>\n                            <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M16 22L6 12L16 2L17.775 3.775L9.55 12L17.775 20.225L16 22Z\" fill=\"black\"\/>\n<\/svg>\n                        <\/button>\n                        <button type=\"button\" class=\"uc-button uc-button-size-l uc-button-contained\"\n                                aria-label=\"Next\">\n                            <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M8.52476 22.3682L6.74976 20.5932L14.9748 12.3682L6.74976 4.14316L8.52476 2.36816L18.5248 12.3682L8.52476 22.3682Z\" fill=\"black\"\/>\n<\/svg>\n                        <\/button>\n                    <\/div>\n                            <\/div>\n                <div class=\"uc-slider__window\">\n            <div class=\"uc-slider__track\">\n                <div class=\"uc-card-icon uc-card-icon-default uc-card-icon__size-large\">\n    <div class=\"uc-card-icon__icon image \">\n        <div class=\"uc-card-icon__icon-inner\">\n            <svg width=\"72\" height=\"72\" viewBox=\"0 0 72 72\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M72 0V39C72 54 57 72 36 72C15 72 0 54 0 39V0H72ZM60 12H12V39C12 42.7245 14.0286 48.0581 18.6103 52.6397C23.0182 57.0476 29.0621 60 36 60C42.9379 60 48.9818 57.0476 53.3897 52.6397C57.9714 48.0581 60 42.7245 60 39V12Z\" fill=\"#00A2FF\"\/>\n<path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M35.627 33L23.1582 22.6093L30.8404 13.3907L54.3716 33L30.8404 52.6093L23.1582 43.3907L35.627 33Z\" fill=\"#00A2FF\"\/>\n<\/svg>\n        <\/div>\n    <\/div>\n<div class=\"uc-card-icon__inner\">\n                        <div class=\"uc-card-icon__title like-h4 no-default-margin\">\n            Reliable tracking you can trust        <\/div>\n                <div class=\"uc-card-icon__description\">\n            <p>Analytics and ads behave predictably based on real user choices. A well-configured cookie banner helps prevent broken tracking, data gaps, and last-minute fixes \u2014 your insights stay dependable.<\/p>\n        <\/div>\n    \n            <\/div>\n<\/div>\n<div class=\"uc-card-icon uc-card-icon-default uc-card-icon__size-large\">\n    <div class=\"uc-card-icon__icon image \">\n        <div class=\"uc-card-icon__icon-inner\">\n            <svg width=\"72\" height=\"72\" viewBox=\"0 0 72 72\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M24 18H18V27H24V18ZM54 33H48V42H54V33ZM30 18H54V27H30V18ZM42 42V33H18V42H42Z\" fill=\"#00A2FF\"\/>\n<path fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M72 0V39C72 54 57 72 36 72C15 72 0 54 0 39V0H72ZM60 12H12V39C12 42.7245 14.0286 48.0581 18.6103 52.6397C23.0182 57.0476 29.0621 60 36 60C42.9379 60 48.9818 57.0476 53.3897 52.6397C57.9714 48.0581 60 42.7245 60 39V12Z\" fill=\"#00A2FF\"\/>\n<\/svg>\n        <\/div>\n    <\/div>\n<div class=\"uc-card-icon__inner\">\n                        <div class=\"uc-card-icon__title like-h4 no-default-margin\">\n            Less work, fewer surprises        <\/div>\n                <div class=\"uc-card-icon__description\">\n            <p>Automatic cookie scanning and updates keep your banner accurate as your site and legal requirements change. Less manual upkeep, fewer headaches, and more time for your team to focus on growth.<\/p>\n        <\/div>\n    \n            <\/div>\n<\/div>\n<div class=\"uc-card-icon uc-card-icon-default uc-card-icon__size-large\">\n    <div class=\"uc-card-icon__icon image \">\n        <div class=\"uc-card-icon__icon-inner\">\n            <svg width=\"72\" height=\"72\" viewBox=\"0 0 72 72\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M0 0V36C0 55.848 16.1519 72 36 72C55.848 72 72 55.848 72 36V0H0ZM24.3203 58.4846C26.0698 53.729 30.653 50.3162 36 50.3162C41.347 50.3162 45.9425 53.7166 47.6797 58.4846C44.1807 60.308 40.2136 61.3552 36 61.3552C31.7864 61.3552 27.8193 60.3203 24.3203 58.4846ZM36.653 37.232C34.0904 37.232 31.9959 35.1376 31.9959 32.575C31.9959 30.0123 34.0904 27.9179 36.653 27.9179C39.2156 27.9179 41.3101 30.0123 41.3101 32.575C41.3101 35.1376 39.2156 37.232 36.653 37.232ZM61.3552 36C61.3552 41.8029 59.3963 47.1499 56.1068 51.4251C54.1355 47.9507 51.3018 45.0308 47.8768 42.9733C50.4148 40.2382 51.9671 36.5914 51.9671 32.575C51.9671 24.1355 45.1047 17.2731 36.6653 17.2731C28.2259 17.2731 21.3635 24.1355 21.3635 32.575C21.3635 36.345 22.7433 39.7947 25.0103 42.4682C21.2033 44.538 18.0493 47.655 15.9179 51.4251C12.6283 47.1499 10.6694 41.8029 10.6694 36V10.6448H61.3799V36H61.3552Z\" fill=\"#00A2FF\"\/>\n<\/svg>\n        <\/div>\n    <\/div>\n<div class=\"uc-card-icon__inner\">\n                        <div class=\"uc-card-icon__title like-h4 no-default-margin\">\n            A better first impression        <\/div>\n                <div class=\"uc-card-icon__description\">\n            <div class=\"thread_comment--threadElement--4grcZ thread_comment--_threadElement--PYPeg text--fontPos11--2LvXf text--_fontBase--QdLsd text--fontPos13--xW8hS text--_fontBase--QdLsd\">\n<div class=\"thread_comment--indentedThreadSubelement--gs1fI thread_comment--threadSubelement--7-le3 thread_comment--threadSubelementNoMargin--aGW6z\" tabindex=\"-1\" data-testid=\"thread-comment-message\">\n<div class=\"comment_message--commentMessage--kZCzD thread_comment--text--FHTSU\" dir=\"auto\" data-testid=\"comment-message\">A clear, customized cookie banner keeps your visitors informed and gives them clear choices. The result: less friction, more trust, and mitigated legal risk from the very first visit.<\/div>\n<\/div>\n<\/div>\n        <\/div>\n    \n            <\/div>\n<\/div>\n<div class=\"uc-card-icon uc-card-icon-default uc-card-icon__size-large\">\n    <div class=\"uc-card-icon__icon image \">\n        <div class=\"uc-card-icon__icon-inner\">\n            <svg width=\"72\" height=\"72\" viewBox=\"0 0 72 72\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M0 0V36C0 55.848 16.1519 72 36 72C55.848 72 72 55.848 72 36V0H0ZM61.3552 36C61.3552 49.9836 49.9836 61.3552 36 61.3552C22.0164 61.3552 10.6448 49.9836 10.6448 36V10.6448H61.3552V36Z\" fill=\"#00A2FF\"\/>\n<path d=\"M36.001 55.3553C47.3234 55.3553 56.5267 46.152 56.5267 34.8296H45.8819C45.8819 40.2752 41.4466 44.6982 36.0133 44.6982C30.5801 44.6982 26.1448 40.2629 26.1448 34.8296H15.5C15.5 46.152 24.7033 55.3553 36.0257 55.3553H36.001Z\" fill=\"#00A2FF\"\/>\n<\/svg>\n        <\/div>\n    <\/div>\n<div class=\"uc-card-icon__inner\">\n                        <div class=\"uc-card-icon__title like-h4 no-default-margin\">\n            Protect revenue as privacy rules change        <\/div>\n                <div class=\"uc-card-icon__description\">\n            <p>A flexible cookie banner and consent management platform helps you adapt as privacy expectations and state laws evolve \u2014 and as your company grows. You stay in control of tracking and monetization without scrambling to rework setups or risking interruptions.<\/p>\n        <\/div>\n    \n            <\/div>\n<\/div>\n            <\/div>\n        <\/div>\n    <\/div>\n            <script type=\"module\">\n            new Uc_Slider(document.querySelector(\"#slider_69d23c0bf3ee0\"), {\"drag_enabled\":true,\"is_qa_card\":false})\n        <\/script>\n                        <\/div>\n<\/div>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: var(--wp--preset--spacing--10-xl);\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:8;\">\n    \n<div class=\"uc-quote\">\n    <div class=\"uc-quote__inner\" style=\"--photo-size: var(--sz-128);\">\n                <div class=\"uc-quote__text\">\u201cCustomers appreciate the ability to know what is being shared and that we are transparent with where it\u2019s shared. Our internal teams are satisfied that we now provide users with a solution that helps us reach compliance with US privacy laws and mitigate our exposure to fines related to noncompliance.\u201d<\/div>\n                <div class=\"uc-quote__author-info\">\n                        <div class=\"uc-quote__author-info__text\">\n                                    <div class=\"uc-quote__author like-h5 no-default-margin\">Andrew Scheidl<\/div>\n                                                    <div class=\"uc-quote__position\">&mdash; Web Developer at DaBella<\/div>\n                                                    <a id=\"1ca4c827-2a87-4c38-89bb-4fcbfdb6f978\" class=\"uc-button uc-button-size-m uc-button-link  no-default-link-decoration uc-button-icon-right\" href=\"\/resources\/case-study-dabella\/\" target=\"\"><span>Read full review<\/span> <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M13.8811 18.2974L12.4811 16.8474L16.0311 13.2974H3.8811V11.2974H16.0311L12.4811 7.74736L13.8811 6.29736L19.8811 12.2974L13.8811 18.2974Z\" fill=\"black\"\/>\n<\/svg>\n<\/a>                            <\/div>\n        <\/div>\n    <\/div>\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<div id=\"uc-cta_69d23c0c044de\" class=\"uc-cta uc-cta--button alignfull uc-cta--size-full uc-cta--primary uc-ctx--blue\">\n    <div class=\"uc-cta__inner container\">\n        <div class=\"uc-cta__content\">\n                                        <div class=\"uc-cta__heading no-default-margin\">Get your websites and apps ready for Texas privacy rules<\/div>\n                                        <div class=\"uc-cta__description\">\n                    <p>Make it easy to provide website visitors and app users with clear notice and real choice \u2014 without disrupting analytics or ads. Try Usercentrics for free and address legal and operational risk as privacy expectations evolve.<\/p>\n                <\/div>\n                                                                    <\/div>\n                            <div class=\"uc-cta__section\">\n                                        <a id=\"3a59b998-f68e-4eaa-91de-426f4f2fd206\" class=\"uc-button uc-button-size-l uc-button-contained  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/pricing\/\" target=\"\"><span>start free<\/span><\/a>                                    <\/div>\n            <\/div>\n<\/div>\n    <script type=\"module\">\n        new Uc_Cta(document.getElementById(\"uc-cta_69d23c0c044de\"));\n    <\/script>\n\n\n<div class=\"uc-flex-row\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: var(--wp--preset--spacing--10-xl);--to: -1;\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-7);--i:9;\">\n    \n\n<p class=\"like-label-l\">Your questions answered<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-talk-to-our-privacy-experts\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--5-xl)\">Talk to our privacy experts<\/h2>\n\n\n\n<p class=\"is-style-text-lg\">Usercentrics helps Texas businesses give visitors clear notice and meaningful choice \u2014 without slowing down websites or apps, analytics, or advertising. Whether you\u2019re preparing for TDPSA requirements or managing multiple U.S. and global privacy laws, we\u2019ll help you protect your business and find the right setup for your website.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-default\">\n<li>Stable tracking and marketing performance as privacy rules evolve<\/li>\n\n\n\n<li>Automated setup and updates that minimize ongoing maintenance<\/li>\n\n\n\n<li>Address legal and operational risk with a single, scalable platform<\/li>\n<\/ul>\n\n\n<a id=\"a945719b-fc9c-4c88-b986-dc93306a34cc\" class=\"uc-button uc-button-size-l uc-button-contained  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/book-a-consultation\/\" target=\"\"><span>Contact sales<\/span><\/a>\n<\/div>\n\n\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-5);--i:10;\">\n    \n\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" height=\"500\" width=\"500\" src=\"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-26.svg\" alt=\"Contact chat bubble at the bottom right corner of a chat illustration\" class=\"wp-image-3578\" style=\"object-fit:cover;width:500px;height:500px\"\/><\/figure>\n\n<\/div>\n\n<\/div>\n\n<div class=\"bg-brand-azure uc-flex-row--background-right uc-ctx--base\" style=\"\" ><div class=\"uc-flex-row container\" style=\"--padding-top: var(--wp--preset--spacing--10-xl); --padding-bottom: var(--wp--preset--spacing--10-xl);\">\n<div class=\"uc-flex-column\" style=\"--column-size: var(--column-size-12);--i:11;\">\n    \n\n<div class=\"uc-featured-resources alignfull uc-featured-resources--layout-default\">\n        <h2 class=\"container no-default-margin\">Learn more<\/h2>\n            <div class=\"uc-featured-resources__content container\">\n            \n    <a class=\"uc-resources-card no-default-link-decoration uc-resources-card--layout-knowledge uc-resources-card--full-width-cover uc-resources-card--js\" href=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/us-data-privacy-laws-by-state\/\" target=\"_self\" id=\"99493750-5d93-4b8b-bb67-ce2644228573\" >\n        <div class=\"uc-resources-card__preview\">\n            <span id=\"0a7973ed-aeaf-40cd-81a3-646377124f87\" class=\"uc-button uc-button-size-s uc-button-tag  selected\"><span>Article<\/span><\/span>            <div class=\"uc-resources-card__preview__inner\">\n                <img loading=\"lazy\" decoding=\"async\" class=\"uc-resources-card__preview__inner__img\" aria-hidden=\"true\" width=\"330\"\n                     height=\"330\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2025\/02\/US-data-privacy-laws-by-state-300x300-1.jpg\" alt=\"\" srcset=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2025\/02\/US-data-privacy-laws-by-state-300x300-1.jpg 300w, https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2025\/02\/US-data-privacy-laws-by-state-300x300-1-150x150.jpg 150w\" sizes=\"(max-width: 1023px) 100vw, 50vw\">\n            <\/div>\n        <\/div>\n        <div class=\"uc-resources-card__content\">\n            <div class=\"uc-resources-card__content__info\">\n\n                                    <div\n                        class=\"uc-resources-card__content__info__publish-date\">Feb 7, 2025<\/div>\n                                            <\/div>\n            <div class=\"uc-resources-card__content__text\">\n                                    <div class=\"uc-resources-card__content__text__heading no-default-margin like-h5\">\n                        U.S. data privacy laws by state: rights and requirements                    <\/div>\n                                                    <div\n                        class=\"uc-resources-card__content__text__description\">In 2025 more U.S. state privacy laws came into effect than in any previous year. Three more followed in 2026 and new ones continue to be passed. We compare what U.S. state-level data privacy laws mean for businesses and consumer rights in light of increasing regulation and enforcement.<\/div>\n                            <\/div>\n            <div class=\"uc-resources-card__content__more\">\n                <span id=\"a31da083-cb6a-4fce-bf54-224ccef4b294\" class=\"uc-button uc-button-size-m uc-button-link  uc-button-icon-right\"><span>Read more<\/span> <svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M13.8811 18.2974L12.4811 16.8474L16.0311 13.2974H3.8811V11.2974H16.0311L12.4811 7.74736L13.8811 6.29736L19.8811 12.2974L13.8811 18.2974Z\" fill=\"black\"\/>\n<\/svg>\n<\/span>            <\/div>\n        <\/div>\n    <\/a>\n                    <\/div>\n    <\/div>\n\n<\/div>\n\n<\/div><\/div>\n\n<div class=\"uc-faq-wrapper uc-faq-wrapper__heading\">\n    <div class=\"uc-faq-heading-wp\">\n        <h2 class=\"uc-faq-heading no-default-margin\">\n            Frequently asked questions        <\/h2>\n    <\/div>\n    <div class=\"uc-faq-content\">\n        <div class=\"uc-accordion-item\">\n    <h3 class=\"uc-accordion-item__title no-default-margin\">    <button class=\"uc-accordion-item__button\"\n            aria-expanded=\"false\"\n            tabindex=\"0\"\n            aria-label=\"Toggle accordion item\">\n        Who does the TDPSA apply to?    <\/button>\n    <\/h3>    <div class=\"uc-accordion-item__content\">\n        <div class=\"uc-accordion-item__content__inner\">\n            <p>The Texas Data Privacy and Security Act (TDPSA) applies to most businesses that conduct business in Texas or offer products or services consumed by Texas residents and that process or sell personal data. Unlike some other U.S. privacy laws, the TDPSA does not include revenue or data-volume thresholds, which means it applies to a much broader range of companies, though it does exclude small businesses as defined by the U.S. Small Business Administration for many obligations.<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n<div class=\"uc-accordion-item\">\n    <h3 class=\"uc-accordion-item__title no-default-margin\">    <button class=\"uc-accordion-item__button\"\n            aria-expanded=\"false\"\n            tabindex=\"0\"\n            aria-label=\"Toggle accordion item\">\n        What rights do Texas residents have under the TDPSA?    <\/button>\n    <\/h3>    <div class=\"uc-accordion-item__content\">\n        <div class=\"uc-accordion-item__content__inner\">\n            <p>Under the TDPSA, Texas residents have the right to:<\/p>\n<ul>\n<li aria-level=\"1\">Access and confirm whether their personal data is being processed<\/li>\n<li aria-level=\"1\">Correct inaccuracies in their personal data<\/li>\n<li aria-level=\"1\">Request deletion of personal data<\/li>\n<li aria-level=\"1\">Obtain a portable copy of their data<\/li>\n<li aria-level=\"1\">Opt out of the sale of personal data, targeted advertising, and certain profiling activities<\/li>\n<\/ul>\n<p>Businesses must provide clear, accessible ways for consumers to exercise these rights.<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n<div class=\"uc-accordion-item\">\n    <h3 class=\"uc-accordion-item__title no-default-margin\">    <button class=\"uc-accordion-item__button\"\n            aria-expanded=\"false\"\n            tabindex=\"0\"\n            aria-label=\"Toggle accordion item\">\n         What are the penalties for violating the TDPSA?    <\/button>\n    <\/h3>    <div class=\"uc-accordion-item__content\">\n        <div class=\"uc-accordion-item__content__inner\">\n            <p>Violations of the TDPSA may result in civil penalties of up to $7,500 per violation. Before enforcement action is taken, businesses are granted a 30-day period to cure alleged violations after receiving notice. The Texas Data Privacy and Security Act does not provide a private right of action; enforcement is handled exclusively by the Texas Attorney General.<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n<div class=\"uc-accordion-item\">\n    <h3 class=\"uc-accordion-item__title no-default-margin\">    <button class=\"uc-accordion-item__button\"\n            aria-expanded=\"false\"\n            tabindex=\"0\"\n            aria-label=\"Toggle accordion item\">\n        What notices are required under the TDPSA?    <\/button>\n    <\/h3>    <div class=\"uc-accordion-item__content\">\n        <div class=\"uc-accordion-item__content__inner\">\n            <p>Businesses must provide up-to-date privacy notices explaining:<\/p>\n<ul>\n<li aria-level=\"1\">What personal data is collected<\/li>\n<li aria-level=\"1\">How the data is used, shared, or sold<\/li>\n<li aria-level=\"1\">How consumers can exercise their rights<\/li>\n<\/ul>\n<p>If a business sells sensitive or biometric data, it must also display specific statutory notices, such as: \u201cNOTICE: We may sell your sensitive personal data.\u201d<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n<div class=\"uc-accordion-item\">\n    <h3 class=\"uc-accordion-item__title no-default-margin\">    <button class=\"uc-accordion-item__button\"\n            aria-expanded=\"false\"\n            tabindex=\"0\"\n            aria-label=\"Toggle accordion item\">\n        How does the TDPSA differ from other U.S. privacy laws?    <\/button>\n    <\/h3>    <div class=\"uc-accordion-item__content\">\n        <div class=\"uc-accordion-item__content__inner\">\n            <p>The TDPSA differs from laws like the California Consumer Privacy Act (CCPA) in several important ways, including:<\/p>\n<table>\n<tbody>\n<tr>\n<th>Topic<\/th>\n<th>TDPSA<\/th>\n<th>CCPA<\/th>\n<\/tr>\n<tr>\n<td>Applicability trigger<\/td>\n<td>Applies to businesses conducting business in Texas or producing products\/services consumed by Texas residents (as a result captures more businesses)<\/td>\n<td>Applies only if specific revenue, data volume, or revenue-from-data thresholds are met<\/td>\n<\/tr>\n<tr>\n<td>Revenue threshold<\/td>\n<td>None (subject to small business exceptions)<\/td>\n<td>Yes (annual gross revenue exceeding $26.2M for the preceding calendar year)<\/td>\n<\/tr>\n<tr>\n<td>Data minimization standard<\/td>\n<td>Data collected and processed must be adequate, relevant, and reasonably necessary.<\/td>\n<td>Broader purpose limitation, less prescriptive minimization language<\/td>\n<\/tr>\n<tr>\n<td>Sensitive data (including children\u2019s)<\/td>\n<td>Opt-in required and display of notice and link if sensitive personal data is sold: \u201cNOTICE: We may sell your sensitive personal data.\u201d<\/td>\n<td>Opt-in required and display of link if sensitive personal information is processed: \u201cLimit the Use of My Sensitive Personal Information\u201d<\/td>\n<\/tr>\n<tr>\n<td>Enforcement<\/td>\n<td>Exclusively by the Texas Attorney General<\/td>\n<td>California Attorney General and the California Privacy Protection Agency (CCPA or CalPrivacy)<\/td>\n<\/tr>\n<tr>\n<td>Cure period<\/td>\n<td>30-day right to cure. Does not expire.<\/td>\n<td>Generally none<\/td>\n<\/tr>\n<tr>\n<td>Private right of action (individual lawsuits for violations)<\/td>\n<td>No<\/td>\n<td>Yes (only for data breaches)<\/td>\n<\/tr>\n<tr>\n<td>Small business exemption<\/td>\n<td>Yes (independent for-profit companies &lt;500 employees)<\/td>\n<td>Generally no, subject to revenue requirements<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n        <\/div>\n    <\/div>\n<\/div>\n\n    <\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"editor_notices":[],"footnotes":""},"class_list":["post-18030","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<title>TDPSA Privacy Requirements for Websites &amp; Apps<\/title>\n<meta name=\"description\" content=\"Learn what the Texas Data Privacy and Security Act (TDPSA) requires, who it applies to, and how a cookie banner helps meet Texas privacy rules\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/usercentrics.com\/us\/tdpsa\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"TDPSA Privacy Requirements for Websites &amp; Apps\" \/>\n<meta property=\"og:description\" content=\"Learn what the Texas Data Privacy and Security Act (TDPSA) requires, who it applies to, and how a cookie banner helps meet Texas privacy rules\" \/>\n<meta property=\"og:url\" content=\"https:\/\/usercentrics.com\/us\/tdpsa\/\" \/>\n<meta property=\"og:site_name\" content=\"Usercentrics - US\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/usercentrics\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-17T12:25:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/usercentrics.com\/wp-content\/uploads\/2024\/09\/Asset-93-100.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@usercentrics\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/usercentrics.com\/us\/tdpsa\/\",\"url\":\"https:\/\/usercentrics.com\/us\/tdpsa\/\",\"name\":\"TDPSA Privacy Requirements for Websites & Apps\",\"isPartOf\":{\"@id\":\"https:\/\/usercentrics.com\/us\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/usercentrics.com\/us\/tdpsa\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/usercentrics.com\/us\/tdpsa\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg\",\"datePublished\":\"2026-03-17T12:23:47+00:00\",\"dateModified\":\"2026-03-17T12:25:01+00:00\",\"description\":\"Learn what the Texas Data Privacy and Security Act (TDPSA) requires, who it applies to, and how a cookie banner helps meet Texas privacy rules\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":\"https:\/\/usercentrics.com\/us\/tdpsa\/\"}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/usercentrics.com\/us\/tdpsa\/#primaryimage\",\"url\":\"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg\",\"contentUrl\":\"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg\",\"copyrightNotice\":\"\u00a9 Copyright 2026 Usercentrics GmbH\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Usercentrics GmbH\"},\"creditText\":\"Image: Usercentrics GmbH\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/usercentrics.com\/us\/#website\",\"url\":\"https:\/\/usercentrics.com\/us\/\",\"name\":\"Usercentrics - US\",\"description\":\"Consent Management Platform (CMP) Usercentrics\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/usercentrics.com\/us\/?s={search_term_string}\"}}],\"inLanguage\":\"en-US\"}]}<\/script>","yoast_head_json":{"title":"TDPSA Privacy Requirements for Websites & Apps","description":"Learn what the Texas Data Privacy and Security Act (TDPSA) requires, who it applies to, and how a cookie banner helps meet Texas privacy rules","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/usercentrics.com\/us\/tdpsa\/","og_locale":"en_US","og_type":"article","og_title":"TDPSA Privacy Requirements for Websites & Apps","og_description":"Learn what the Texas Data Privacy and Security Act (TDPSA) requires, who it applies to, and how a cookie banner helps meet Texas privacy rules","og_url":"https:\/\/usercentrics.com\/us\/tdpsa\/","og_site_name":"Usercentrics - US","article_publisher":"https:\/\/www.facebook.com\/usercentrics","article_modified_time":"2026-03-17T12:25:01+00:00","og_image":[{"url":"https:\/\/usercentrics.com\/wp-content\/uploads\/2024\/09\/Asset-93-100.jpg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_site":"@usercentrics","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/usercentrics.com\/us\/tdpsa\/","url":"https:\/\/usercentrics.com\/us\/tdpsa\/","name":"TDPSA Privacy Requirements for Websites & Apps","isPartOf":{"@id":"https:\/\/usercentrics.com\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/usercentrics.com\/us\/tdpsa\/#primaryimage"},"image":{"@id":"https:\/\/usercentrics.com\/us\/tdpsa\/#primaryimage"},"thumbnailUrl":"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg","datePublished":"2026-03-17T12:23:47+00:00","dateModified":"2026-03-17T12:25:01+00:00","description":"Learn what the Texas Data Privacy and Security Act (TDPSA) requires, who it applies to, and how a cookie banner helps meet Texas privacy rules","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":"https:\/\/usercentrics.com\/us\/tdpsa\/"}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/usercentrics.com\/us\/tdpsa\/#primaryimage","url":"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg","contentUrl":"https:\/\/usercentrics.com\/wp-content\/uploads\/sites\/7\/2024\/09\/Asset-22.svg","copyrightNotice":"\u00a9 Copyright 2026 Usercentrics GmbH","creator":{"@type":"Organization","name":"Usercentrics GmbH"},"creditText":"Image: Usercentrics GmbH"},{"@type":"WebSite","@id":"https:\/\/usercentrics.com\/us\/#website","url":"https:\/\/usercentrics.com\/us\/","name":"Usercentrics - US","description":"Consent Management Platform (CMP) Usercentrics","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/usercentrics.com\/us\/?s={search_term_string}"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/pages\/18030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/comments?post=18030"}],"version-history":[{"count":0,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/pages\/18030\/revisions"}],"wp:attachment":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/media?parent=18030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}