Texas Data Privacy and Security Act (TDPSA) Awareness Course
Texas is the second-largest state economy in the United States, and the Texas Data Privacy and Security Act brings comprehensive privacy requirements to businesses operating in the Lone Star State. With its unique small business exemption and broad applicability, TDPSA affects organisations differently than other state privacy laws.
This course provides practical guidance on the Texas Data Privacy and Security Act. We cover who must comply (including the important small business exemption), the rights Texas residents have over their data, sensitive data requirements, and enforcement mechanisms.
The TDPSA became effective on July 1, 2024, and applies to businesses that aren't classified as small businesses under SBA definitions. Like other state laws, it provides a 30-day cure period and penalties up to $7,500 per violation. No technical background required - just focused, practical training your team can apply immediately.
Why learn about the TDPSA?
- Comply with privacy requirements in the second-largest US state economy
- Understand the unique small business exemption and whether it applies to you
- Handle Texas consumer data requests correctly within required timeframes
- Avoid penalties of up to $7,500 per violation
- Implement proper consent mechanisms for sensitive and biometric data
Course features
Texas-specific
Focused entirely on the TDPSA with Texas-specific requirements, the small business exemption, and state enforcement context.
Practical scenarios
Real-world examples showing how the TDPSA applies in everyday business situations across various industries.
Current guidance
Covers the law as effective July 2024 with the latest interpretations and compliance guidance.
Official sources
Built from the Texas Business and Commerce Code and Attorney General guidance, with references to official documentation.
Learning with us
Course information
Learning outcomes
- Understand when and how the TDPSA applies to your organisation
- Know whether the small business exemption applies to your business
- Recognise the rights Texas residents have over their personal data
- Handle consumer data requests correctly within required timeframes
- Understand enforcement, the cure period, and potential penalties
Training recommendations
- All employees who handle customer data should complete this training.
- Annual refresher training is recommended to stay current with amendments and enforcement trends.
- Teams handling sensitive data or consumer requests may benefit from additional role-specific training.
This course is recommended for
Employees who handle customer data at organisations that conduct business in Texas. This includes marketing, sales, customer service, HR, IT, and compliance teams, particularly at organisations that are not classified as small businesses under SBA definitions.
Prerequisites
There are no prerequisites for this course. No legal or technical background is required.
What do I need for this course?
This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).
Course content
In this section we introduce the Texas Data Privacy and Security Act and explain why it matters for your organisation. We cover the unique aspects of Texas's approach and what makes it different from other state laws.
Lessons
- Introduction to the TDPSA
- Why Texas matters: the second-largest state economy
- Effective date and compliance timeline
- Key definitions you need to know
Texas has unique applicability rules that differ from other states. This section covers who the law applies to, including the small business exemption and the role of revenue thresholds.
Lessons
- Business applicability thresholds
- The small business exemption
- Conducting business in Texas
- Entities exempt from the TDPSA
Texas residents have specific rights over their personal data. We cover what those rights are, how to handle requests, and the timeframes you must meet.
Lessons
- The right to know and access
- The right to correct inaccuracies
- The right to delete personal data
- The right to data portability
- The right to opt out of sales and targeted advertising
- Handling consumer requests within 45 days
The TDPSA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data in Texas and how to implement proper consent mechanisms.
Lessons
- What is sensitive data under TDPSA?
- The opt-in consent requirement
- Children's data and parental consent
- Consent for biometric and geolocation data
- Practical consent workflows
This section covers the practical obligations organisations must meet, including privacy notices, data protection assessments, and contracts with processors.
Lessons
- Privacy notice requirements
- Data protection assessments
- Data minimisation and purpose limitation
- Security obligations
- Processor and contractor requirements
Understand how the TDPSA is enforced, the 30-day cure period, and what penalties look like. We also cover how to respond if you receive an investigation notice.
Lessons
- Attorney General enforcement authority
- The 30-day cure period
- Penalties up to $7,500 per violation
- No private right of action
- Responding to investigations
Test your knowledge with scenario-based questions covering all the key TDPSA concepts from the course.
Lessons
- Knowledge check (10 questions)
How it works
Get notified
Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.
Start learning
Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.
Stay compliant
As the TDPSA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends and amendments.
What's included
Training
- Distraction-free online learning platform
- Scenario-based end of course assessment
Updates
- Access to all course material updates and enhancements for the length of your access period
Certification
- Certificate on completion
Course FAQs
Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.
This course is designed for employees who handle customer data at organisations that may be subject to Texas's privacy law. This includes marketing, sales, customer service, HR, and IT teams at organisations doing business in Texas.
While TDPSA follows the Virginia model, it has unique features. Most notably, it includes a small business exemption based on SBA definitions, making it one of the few state laws to exclude smaller businesses. It also has specific requirements for biometric data and applies to the second-largest state economy in the US.
TDPSA applies to organisations that conduct business in Texas, produce products or services consumed by Texas residents, process or sell personal data, and are NOT classified as a small business under the US Small Business Administration definitions. Unlike other states, Texas does not use specific data processing thresholds.
The Texas Attorney General can impose civil penalties of up to $7,500 per violation. However, organisations have a 30-day period to cure any alleged violation before penalties apply. There is no private right of action, meaning individuals cannot sue directly.
Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.
The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.
Get notified when this course launches
Sign up to our newsletter to be the first to know when this course is available.
This course will be included in Measured Collective Plus
Get access to all our courses with one subscription from £236/year.
Learn About MC PlusAvailable courses
PECR & ePrivacy for Marketers
Included in PLUS
Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.
View Course
GDPR Refresher Training Course
Included in PLUS
A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…
View Course
GDPR Essentials Course
Included in PLUS
Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.
View Course