Unlock unlimited alerts, exports & API access — RuleWatch Pro at $29/mo
Regulation dossier
A focused view of the rule, its enforcement posture, and the timeline teams should keep in their operating plan.
Plain-English summary
Texas gives certain businesses a safe harbor from exemplary damages after a breach if they implemented and maintained a qualifying cybersecurity program. It affects Texas businesses that handle sensitive personal information and pushes them toward recognized cybersecurity frameworks and scaled security controls.
Reading guide
Use the timeline below to see how the rule progressed from enactment to current obligations.
Related regulations surface adjacent requirements in the same jurisdiction or policy lane.
Timeline
Sep 1, 2025
Texas Business and Commerce Code Chapter 542 became effective for qualifying cybersecurity programs.
Sep 1, 2025
The Chapter 542 safe harbor became available to covered businesses maintaining qualifying cybersecurity programs.
Sep 1, 2025
Covered businesses could align their cybersecurity programs to recognized frameworks scaled to their risk profile.
Get email alerts when this regulation changes and export records to CSV for your compliance workflow — available with RuleWatch Pro.
Subscribe for regulation alerts
Free weekly digest for compliance professionals following material legal changes.
Related regulations
Pulled from the same jurisdiction or category so teams can compare adjacent obligations quickly.
Texas, United States
Texas established a statewide AI governance framework with disclosure duties, prohibited-use rules, enforcement powers, and a regulatory sandbox. It affects government agencies, health care providers, developers, and deployers using AI in Texas, especially where biometric collection, unlawful discrimination, or constitutional harms are at issue.
Texas, United States
Texas requires covered digital service providers that are likely to be used by minors to offer parental tools and to limit certain data and design practices for known minor users. The law restricts targeted advertising to minors, requires age-appropriate experience controls, and imposes transparency obligations on covered services. It affects social media and other account-based digital services used by Texas minors.
Texas, United States
Texas created a broad consumer privacy law that covers access, deletion, portability, and correction rights, with obligations focused on data controllers and processors.