Texas Data Privacy and Security Act, deidentified or pseudonymous data (Tex. Bus. & Com. Code 541.106(a))
Texas imposes the same three de-identification duties as duties on the holder: reasonable measures, a public commitment, and contracts binding recipients.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“A controller in possession of deidentified data shall: ... (1) take reasonable measures to ensure that the data cannot be associated with an individual; ... (2) publicly commit to maintaining and using deidentified data without attempting to reidentify the data; and ... (3) contractually obligate any recipient of the deidentified data to comply with the provisions of this chapter.”
Where it was read
Also read from the same source
- Texas Data Privacy and Security Act, definitions (sale of personal data) (Tex. Bus. & Com. Code 541.001(28))
- Texas Data Privacy and Security Act, controller duties (sensitive data consent) (Tex. Bus. & Com. Code 541.101(b)(4))
- Texas Data Privacy and Security Act, privacy notice (sale of sensitive data) (Tex. Bus. & Com. Code 541.102(b))
- Texas Data Privacy and Security Act, effective date (H.B. 4, 2023) (Tex. Bus. & Com. Code ch. 541, history note)
- Texas Data Privacy and Security Act, definition of consumer (Tex. Bus. & Com. Code 541.001(7))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide