What does Texas require right now?

Requires developers and deployers of high-risk AI systems to perform impact assessments, maintain transparency, and implement risk management programs. Covers AI used in consequential decisions (employment, education, housing, healthcare). Includes anti-discrimination provisions and audit requirements. NOTE: this description reflects the bill as drafted; enrolled-text confirmation pending (Jessica Maddry clearance, Brief 001).

Comprehensive consumer data privacy law covering controllers and processors doing business in Texas. Grants consumers rights to access, correct, delete, and opt out of processing for targeted advertising, sale, or profiling. Requires data protection assessments for high-risk processing activities.

Prohibits private entities from capturing biometric identifiers (fingerprints, retina scans, voiceprints, facial geometry) without informed written consent. Requires secure storage and prohibits sale or profit from biometric data. Enforcement is exclusive to the Texas Attorney General — no private right of action; civil penalties up to $25,000 per violation recovered by the AG.

Tex. Ed. Code ch. 32, Subchapter D (Student Information) regulates operators of websites/apps used in K-12: no targeted advertising, no sale of covered information, security procedures required. A state-required data sharing agreement applies to agency-approved operators only (§ 32.155(b)) — the statute does not require a signed DPA with every vendor. § 32.151 is the definitions section.