Consumer’s Personal Data Rights; Request to Exercise Rights

What it requires

Consumers exercise their rights by submitting a request to the controller, and a parent or legal guardian may exercise them on behalf of a known child (subsection (a)). A controller must comply with an authenticated request to confirm/access, correct, and delete personal data, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and profiling that produces a legal or similarly significant effect (subsection (b)).

Statute text

(a) "A consumer is entitled to exercise the consumer rights authorized by this section at any time by submitting a request to a controller ...." (b) "A controller shall comply with an authenticated consumer request to exercise the right to: (1) confirm whether a controller is processing the consumer's personal data and to access the personal data; ... (5) opt out of the processing of the personal data for purposes of: (A) targeted advertising; (B) the sale of personal data; or (C) profiling ...."

Texas Data Privacy and Security Act, § 541.051Read the full section from Texas Office of the Attorney General