SB 1298 requires Texas public school districts (K-12) to include online safety instruction as part of their required curriculum, starting in the 2025-2026 school year. The curriculum must cover specific topics like safe social media use, preventing oversharing of personal information, identifying cyberbullying and online predators, and reporting suspicious activity. Additionally, the Texas Department of Public Safety must develop a public safety education plan that includes online safety instruction for citizens under 18. The bill specifies these exact topics for school curricula and references existing law for further detail.
SB 1928 prohibits courts, attorneys, and court staff from disclosing specific personal information collected during jury selection. It makes confidential details like home addresses, phone numbers, Social Security numbers, driver's license numbers, and juror questionnaire responses. Disclosure would only be permitted if a court grants approval for "good cause," such as for parties involved in a case or news media members. The law applies to jury duty starting September 1, 2025, and does not affect information collected before that date.
HB 5046 requires businesses that sell consumers' personal data to third parties or use it for targeted advertising to clearly disclose these practices and provide an opt-out option. It directly affects businesses engaging in these data sales or targeted advertising activities within Texas. The bill mandates that businesses pay consumers 10% of the gross proceeds from data sales within 60 days of the transaction. The law takes effect on September 1, 2025, creating a new financial obligation for covered businesses.
HB 4516 prohibits Texas businesses from using technology developed or supplied by entities controlled by China to collect, process, transfer, or store biometric, genetic, or medical data of Texas residents. This applies to any business handling such sensitive personal information, including health records, DNA, or biometric identifiers like fingerprints. Violating the ban is a Class A misdemeanor (up to one year in jail) or a state jail felony for repeat offenses. The law targets technology from Chinese-controlled entities to protect Texas residents' data privacy.
HB 4636 requires businesses that sell consumers' precise geolocation data or real-time driving data (including location, speed, and trip details) to include a specific notice: "NOTICE: We may sell your precise geolocation data." This notice must appear alongside the business's standard privacy notice. The bill classifies both precise geolocation data and real-time driving data as "sensitive data" under Texas law. It takes effect on September 1, 2025, directly affecting apps and services that collect or sell this type of consumer data.
HB 5495 requires online companies to honor browser-based "global privacy controls" (like privacy settings in browsers) that signal a consumer's request not to sell or share their personal data. It directly affects businesses collecting consumer data online in Texas, mandating they treat these signals as valid opt-out requests. The bill establishes civil penalties of up to $5,000 per violation for failing to comply, with higher penalties for repeated offenses. The law takes effect September 1, 2025.
HB 3285 would require smart device manufacturers and service providers (like those making smart speakers, wearables, or home appliances) to provide consumers with clear, mobile app-based summaries about how their personal data is handled. The bill mandates that operators explain what data is collected (including biometrics or recordings), why it's collected, how it's captured, where it's stored (locally or sent to others), and the security policies protecting it. This directly affects users of smart devices and operators who sell, manufacture, or process data from these devices in Texas. The law would apply to most commercial smart devices but exclude state agencies, local governments, and utility providers.
SB 1659 requires government entities to obtain a warrant before searching location information they purchase from data brokers or electronic personal data trackers (like apps/websites that collect location data). This bill directly affects law enforcement and government agencies that buy such location data for investigations. It amends Texas law to explicitly include purchased location data under the list of items requiring a warrant, specifically adding it to Article 18.02(a)(15) of the Code of Criminal Procedure. The key mechanism is changing the legal standard for accessing this type of data, moving from no warrant requirement to judicial approval. This policy change applies to all location data acquired by government entities from third-party sources, not data collected directly by the government.
SB 1447 requires the Texas Education Agency to create standards for public schools using electronic devices and software. It mandates that schools minimize student data collection, obtain direct parental consent for most apps (except essential testing tools), and prohibit apps from conducting unauthorized mental health assessments. The bill also requires schools to provide parents with cybersecurity resources, set device deactivation periods for safety, and consider age-appropriate device use in classrooms. These standards apply directly to all Texas public school districts and charter schools, affecting how they manage student technology access.
SB 2420 requires app stores (like Apple App Store or Google Play) operating in Texas to verify users' ages using reasonable methods and assign them to specific categories: child (<13), younger teenager (13-15), older teenager (16-17), or adult (18+). It mandates parental consent for minors' accounts and defines key terms like "personal data" and "mobile device." The law directly affects app store operators serving Texas residents, with requirements taking effect January 1, 2026. This bill creates the "App Store Accountability Act" within Texas law to regulate age-based access to mobile applications.
