TX TDPSA + SCOPE
Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement
Texas AG Paxton is the MOST AGGRESSIVE enforcer against AI companion companies. December 2024 investigations launched against Character.AI, Reddit, Instagram, Discord.
Jurisdiction
Texas
Enacted
Pending
Effective
Jul 1, 2024
Enforcement
Texas Attorney General
Why It Matters
Texas AG is most active enforcer against AI companion companies. Expect investigation if serving Texas minors.
Recent Developments
December 2024: AG Paxton investigations into Character.AI, Reddit, Instagram, Discord. SCOPE Act content-filtering provisions enjoined by federal court Aug 2024; ASAA (App Store Accountability Act, SB 2420) faces CCIA lawsuit filed Oct 2025.
At a Glance
Requires
Who Must Comply
- Businesses processing Texas residents' data
- Online platforms serving Texas minors
Safety Provisions
- TDPSA: Consumer data rights, sensitive data consent requirements
- TDPSA: Children's data restrictions
- SCOPE Act: Parental controls, age verification for minors
- ASAA (Jan 2026): App store age verification before minors download
- AG active enforcement posture
Compliance & Enforcement
Key Dates
Jan 1, 2026
ASAA (App Store Accountability Act, SB 2420) requires app store age verification
Penalties
$8K/violation
View on map
Texas
Focus Areas
Cite This
APA
Texas. (2024). Texas Data Privacy and Security Act (TDPSA) + Child Safety Enforcement.
Related Regulations
TX Social Media Deepfake Takedown
Requires social media platforms to provide accessible complaint system for explicit deepfake material. Platform must confirm receipt within 48 hours, investigate within 30 days (60 days if delayed), and provide mandatory updates to reporting user.
TX AI Catfishing Law
Establishes civil liability for online impersonation using AI. Person liable if they knowingly and with intent to harm, defraud, intimidate, or threaten use AI to impersonate another's name, voice, signature, photograph, or likeness. Civil remedies include injunctive relief, actual damages, exemplary damages ($500+ minimum), costs, and attorney's fees. Satire and parody exempted.
UK AI/ADM Code Regs (SI 2026/425)
Statutory instrument requiring the Information Commissioner to prepare a statutory code of practice on processing personal data in artificial intelligence and automated decision-making systems, with specific provision for protecting children's personal data.
DUA Act 2025
Omnibus data legislation covering customer data access, digital verification services, the Information Commission, and AI-related provisions including copyright/training transparency requirements and new criminal offenses for creating AI-generated intimate images (deepfakes).
CA SB 947
Adds Labor Code Part 5.5.5 on employers' use of automated decision systems (ADS). Bars using an ADS to violate labor or civil rights law, to infer an employee's protected status, or to predict and act against workers exercising legal rights; bars relying solely on an ADS for disciplinary or termination decisions and requires human corroboration where an ADS output is the primary basis; and requires a written post-use notice and, on request, a description of the employee's data used. Operative July 1, 2027.
CA AB 1405
Requires AI auditors to register with the Government Operations Agency and bars unregistered persons from offering, selling or conducting a covered AI audit from January 1, 2029. Registered auditors must maintain independence from the auditee, follow applicable audit protocols, report in detail, and keep records for at least 10 years. Certified public accountants licensed by the California Board of Accountancy are treated as satisfying the independence requirements if they comply with applicable professional standards.
Last updated February 17, 2026. Verify against primary sources before relying on this information.