On July 1, 2024, the Texas Data Privacy and Security Act and the Oregon Consumer Privacy Act will come into effect.
The Texas law contains one of the broadest scopes of any U.S. state privacy law to date. Any entity doing business in Texas or processing the personal data of Texas residents is subject to the law, except for those that qualify as a “Small Business,” as defined by the Small Business Administration. Both Texas and Oregon laws require specific content for consumer notices and disclosures and related consent practices. Both laws create consumer rights that businesses must honor within defined timeframes. Violations are subject to fines of up to $7,500 per violation, and potentially other penalties.
Note also that, over the next seven months, six other state comprehensive privacy laws will come into effect, including Nebraska (with an identically broad scope to Texas), Montana, Delaware, New Hampshire, Iowa, and New Jersey. If not conducted already, your businesses should plan to assess applicability and take steps to comply. Please feel free to reach out to our privacy team for a review.
