TX TDPSA + SCOPE
Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement
Texas AG Paxton is the MOST AGGRESSIVE enforcer against AI companion companies. December 2024 investigations launched against Character.AI, Reddit, Instagram, Discord.
Jurisdiction
Texas
US-TX
Enacted
Unknown
Effective
Jul 1, 2024
Enforcement
Texas Attorney General
What It Requires
Who Must Comply
This law applies to:
- • Businesses processing Texas residents' data
- • Online platforms serving Texas minors
Who bears obligations:
Safety Provisions
- • TDPSA: Consumer data rights, sensitive data consent requirements
- • TDPSA: Children's data restrictions
- • SCOPE Act: Parental controls, age verification for minors
- • ASAA (Jan 2026): App store age verification before minors download
- • AG active enforcement posture
Compliance Timeline
Jan 1, 2026
ASAA (App Store Accountability Act, SB 2420) requires app store age verification
Enforcement
Enforced by
Texas Attorney General
Penalties
$8K/violation
Up to $7,500 per violation; injunctive relief.
Quick Facts
- Binding
- Yes
- Mental Health Focus
- No
- Child Safety Focus
- Yes
- Algorithmic Scope
- No
Why It Matters
Texas AG is most active enforcer against AI companion companies. Expect investigation if serving Texas minors.
Recent Developments
December 2024: AG Paxton investigations into Character.AI, Reddit, Instagram, Discord. SCOPE Act content-filtering provisions enjoined by federal court Aug 2024; ASAA (App Store Accountability Act, SB 2420) faces CCIA lawsuit filed Oct 2025.
What You Need to Comply
You need: sensitive data consent; children's data safeguards; age verification; parental controls. Prepare for AG investigation.
NOPE can helpCite This
APA
Texas. (2024). Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement. Retrieved from https://nope.net/regs/us-tx-enforcement
BibTeX
@misc{us_tx_enforcement,
title = {Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement},
author = {Texas},
year = {2024},
url = {https://nope.net/regs/us-tx-enforcement}
} Related Regulations
TX TRAIGA
Comprehensive AI governance with prohibited uses approach. Bans AI that incites self-harm/suicide, exploits children, or intentionally discriminates. Government entities have additional disclosure requirements. First-in-nation AI regulatory sandbox program.
DUA Act 2025
Omnibus data legislation covering customer data access, digital verification services, the Information Commission, and AI-related provisions including copyright/training transparency requirements and new criminal offenses for creating AI-generated intimate images (deepfakes).
Brunei PDPO
Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.
NY S 8420-A
Requires disclosure when advertisements use AI-generated 'synthetic performers.' Penalties of $1,000 for first offense, $5,000 for subsequent violations.
India DPDP Act
STRICTEST children's provisions in APAC. Children = under 18; verifiable parental consent MANDATORY; PROHIBITION on tracking, behavioral monitoring, targeted advertising to children.
ME LD 1727
Consumer protection law requiring disclosure that users are interacting with AI, not a human. Common precursor to crisis-harm regulation.