Consumer’s Personal Data Rights; Request to Exercise Rights
Reference only: This requirement is not currently tested by the Privisy scanner. It is included for reference. Consult a qualified attorney to assess your compliance posture.
What it requires
Consumers exercise their rights by submitting a request to the controller, and a parent or legal guardian may exercise them on behalf of a known child (subsection (a)). A controller must comply with an authenticated request to confirm/access, correct, and delete personal data, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and profiling that produces a legal or similarly significant effect (subsection (b)).
Legal text (excerpt)
(a) "A consumer is entitled to exercise the consumer rights authorized by this section at any time by submitting a request to a controller ...." (b) "A controller shall comply with an authenticated consumer request to exercise the right to: (1) confirm whether a controller is processing the consumer's personal data and to access the personal data; ... (5) opt out of the processing of the personal data for purposes of: (A) targeted advertising; (B) the sale of personal data; or (C) profiling ...."
Primary source
Texas Office of the Attorney General: § 541.051: Consumer’s Personal Data Rights; Request to Exercise Rights ↗Legal notice: This page is for informational purposes only and does not constitute legal advice. The legal text excerpt is reproduced from official public sources and is current as of the stated effective date. Laws change: verify against the authoritative source and consult a licensed attorney for compliance guidance.