Texas data breach notifications

Persons who conduct business in Texas and own or license computerized sensitive personal information must notify affected residents, and — when a breach involves at least 250 Texas residents — the Texas Attorney General.

How DisclosureLens indexes Texas filings

DisclosureLens polls the Texas AG portal on a regular schedule, fetches each new notice, extracts a structured BreachDisclosure v1 record, resolves the affected entity to its LEI/CIK when possible, and publishes via the REST API (webhooks and STIX/TAXII delivery are planned).

Extraction provenance

Extracted records carry per-field source citations into the Texas AG notice they came from, plus a per-record confidence score and a full extraction audit trail. Texas filings inherit the same BreachDisclosure v1 schema as SEC 8-Ks, HHS OCR notices, and EU DPA registers — same fields, same provenance metadata, deduped against same-incident filings in other jurisdictions. Full pipeline details: Sources & Methodology.

Statute

Tex. Bus. & Com. Code § 521.053

Authoritative source

https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage

Corrections

Email corrections@disclosurelens.com — 48-hour SLA from receipt.