Texas Data Privacy and Security Act, controller duties (sensitive data consent) (Tex. Bus. & Com. Code 541.101(b)(4))
A controller may not process sensitive data, including disclosing it for AI training, without the consumer's opt-in consent.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(4) process the sensitive data of a consumer without obtaining the consumer's consent”
Where it was read
Also read from the same source
- Texas Data Privacy and Security Act, definitions (sale of personal data) (Tex. Bus. & Com. Code 541.001(28))
- Texas Data Privacy and Security Act, privacy notice (sale of sensitive data) (Tex. Bus. & Com. Code 541.102(b))
- Texas Data Privacy and Security Act, deidentified or pseudonymous data (Tex. Bus. & Com. Code 541.106(a))
- Texas Data Privacy and Security Act, effective date (H.B. 4, 2023) (Tex. Bus. & Com. Code ch. 541, history note)
- Texas Data Privacy and Security Act, definition of consumer (Tex. Bus. & Com. Code 541.001(7))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide