STATE PRIVACY NOTICE OVERLAYS - TEXAS

TEXAS (TDPSA)

• Rights: access, correction, deletion, portability, opt-out of targeted advertising/sale/profiling.
• Provide clear opt-out methods; honor required opt-out signals where applicable.
• Conduct and document data protection assessments for high-risk processing.
• Contracts with processors must meet TDPSA requirements.

UNIVERSAL IMPLEMENTATION NOTES

• Intake and verify rights requests; respond within statutory timelines.
• Document appeals process for denied requests where required by law.
• Update cookies/SDKs and consent/opt-out flows to match disclosures.
• Track retention schedules; minimize sensitive data.
• Update vendor DPAs to include state-specific terms.

[// GUIDANCE: If handling children's data (under 16/13), layer on COPPA/child-consent rules and under-18 sensitive treatment where applicable. If selling/sharing, maintain a sales/sharing register and contract restrictions.]