Texas Privacy Disclosure

1. Overview of the law

The Texas Data Privacy and Security Act took effect on July 1, 2024. It applies to any person that conducts business in Texas or produces a product or service consumed by Texas residents, processes or sells personal data, and is not a small business as defined by the U.S. Small Business Administration. Unlike most state laws, the TDPSA has no consumer-volume threshold. The law is enforced by the Texas Attorney General.

2. Your rights

• Right of access. Confirm processing and get a copy of your personal data.
• Right to correct. Fix inaccurate personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to portability. Receive your data in a usable format.
• Right to opt out. Stop targeted advertising, sale of personal data, and certain profiling.
• Right to appeal. Appeal a denial within forty-five days.

3. How SIE complies

We obtain opt-in consent before processing sensitive data, including racial or ethnic origin, religious belief, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data for identification, precise geolocation, and any data of a known child. The TDPSA also requires explicit notice when we sell sensitive or biometric data. SIE does not sell either category.

4. Authorized agents

Texas allows authorized agents for opt-out requests. The agent should provide written authorization signed by you. We may verify the request with you directly before acting on it.

5. How to submit a request

Or email [email protected] with the subject line "Texas TDPSA Request".We respond within forty-five days, with a single forty-five-day extension where reasonably necessary.

6. Effective date and scope

The TDPSA took effect on July 1, 2024. It applies to almost every business operating in Texas that processes or sells personal data, except small businesses defined by the U.S. SBA. There is no consumer-volume threshold.