Texas Data Removal Guide (2026)
As of July 2024, Texas residents gained deletion rights under the TDPSA, the Texas Data Privacy and Security Act. The law is enforced exclusively by the Attorney General's Consumer Protection Division, with no private right of action but substantial civil penalties.
Research status: published state guide pending fresh official-source re-verification.
This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.
At a glance
- Comprehensive state privacy law
- Recorded: TDPSA
- Broker response deadline
- 45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
- Enforcement
- Texas Attorney General. Consumer Protection Division
Texas Data Privacy and Security Act (TDPSA)
The TDPSA applies to a person that conducts business in Texas or produces a product or service consumed by Texas residents, processes or engages in the sale of personal data, and is not a small business as defined by the U.S. Small Business Administration, subject to statutory exceptions. Consumers have rights to access, delete, correct, port, and opt out of targeted advertising, sale, or profiling. Businesses generally have 45 days, with a possible 45-day extension when permitted, to respond. The Texas AG has exclusive enforcement authority; penalties and the statutory notice/cure process must be checked in the current chapter.
Read the full TDPSAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.
What rights do Texas residents have?
- →Right to delete personal data (§ 541.051)
- →Right to opt out of targeted advertising and sale
- →Right to data portability
- →Right to appeal a denied request
- →Enforcement by AG; civil penalties up to $7,500 per violation
Where does your data leak from in Texas?
The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Texas:
- Texas Department of Public Safety driver records
- Harris, Dallas, Tarrant, Bexar County property records
- Texas SOS business filings
- Texas Department of State Health Services vital records
Generate requests in under 60 seconds
Generate requests for 1009 US/global broker workflows for $9
What if a broker ignores your request?
If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Texas Attorney General. Consumer Protection Division complaint route. The authority's jurisdiction and available remedies vary.
File a complaint with Texas Attorney General. Consumer Protection Division ↗FAQ: Texas data removal
Does the Texas TDPSA apply to out-of-state data brokers?+
Location alone does not decide coverage. An out-of-state provider may be covered if it conducts business in Texas or produces a product or service consumed by Texas residents, processes or sells personal data, and meets the chapter's non-small-business and exception rules. Check the current statute and provider facts before treating a request as legally covered.
What is the "cure period" under Texas law?+
The 30-day cure rule applies after the Texas Attorney General gives the business the statutory notice. It is not a universal 30-day deadline for the business to answer a consumer request, and filing an AG complaint does not itself guarantee a particular investigation or penalty timeline. Keep the request and response record, then use the current AG complaint instructions if the matter remains unresolved.
Can Texas residents sue data brokers directly?+
No. TDPSA has no private right of action. Enforcement is exclusive to the Attorney General. Filing a complaint with the AG's Consumer Protection Division is the enforcement path.
What Texas-specific brokers should I target?+
Texas court and property records are separate source systems from a people-search provider's copy. If you find a matching listing, save the exact source privately, use the provider's current request route, and separately check whether the underlying public record has its own correction or confidentiality process. Do not assume a named provider or county source has a particular data relationship without current evidence.