TX TDPSA + SCOPE
Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement
Texas AG Paxton is the MOST AGGRESSIVE enforcer against AI companion companies. December 2024 investigations launched against Character.AI, Reddit, Instagram, Discord.
Jurisdiction
Texas
Enacted
Pending
Effective
Jul 1, 2024
Enforcement
Texas Attorney General
Why It Matters
Texas AG is most active enforcer against AI companion companies. Expect investigation if serving Texas minors.
Recent Developments
December 2024: AG Paxton investigations into Character.AI, Reddit, Instagram, Discord. SCOPE Act content-filtering provisions enjoined by federal court Aug 2024; ASAA (App Store Accountability Act, SB 2420) faces CCIA lawsuit filed Oct 2025.
At a Glance
Requires
Who Must Comply
- Businesses processing Texas residents' data
- Online platforms serving Texas minors
Safety Provisions
- TDPSA: Consumer data rights, sensitive data consent requirements
- TDPSA: Children's data restrictions
- SCOPE Act: Parental controls, age verification for minors
- ASAA (Jan 2026): App store age verification before minors download
- AG active enforcement posture
Compliance & Enforcement
Key Dates
Jan 1, 2026
ASAA (App Store Accountability Act, SB 2420) requires app store age verification
Penalties
$8K/violation
View on map
Texas
Focus Areas
Compliance Help
Requires sensitive data consent; children's data safeguards; age verification; parental controls.
See how NOPE helpsCite This
APA
Texas. (2024). Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement.
Related Regulations
TX Social Media Deepfake Takedown
Requires social media platforms to provide accessible complaint system for explicit deepfake material. Platform must confirm receipt within 48 hours, investigate within 30 days (60 days if delayed), and provide mandatory updates to reporting user.
TX Deepfake Intimate Images Law
Expands civil liability for AI-generated nonconsensual intimate images (deepfake pornography). Criminalizes threatening to create intimate deepfakes to coerce, extort, harass, or intimidate. Imposes penalties on individuals, websites, and payment processors involved in distributing such content. 10-year statute of limitations.
DUA Act 2025
Omnibus data legislation covering customer data access, digital verification services, the Information Commission, and AI-related provisions including copyright/training transparency requirements and new criminal offenses for creating AI-generated intimate images (deepfakes).
ND Healthcare AI Act
Regulates AI use in healthcare prior authorization decisions. Requires adverse determinations be reviewed by licensed physicians qualified in relevant specialty. Sets decision timelines: 7 days for non-urgent, 72 hours for urgent services. Prohibits prior authorization for emergency services and opioid use disorder treatment.
Brunei PDPO
Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.
IL AI Employment Law
Amends Illinois Human Rights Act to make it a civil rights violation for employers to use AI that discriminates based on protected classes in employment decisions. Requires notice to employees and applicants when AI is used in hiring, firing, promotion, or discipline.
Last updated February 17, 2026. Verify against primary sources before relying on this information.