Texas Data Privacy and Security Act

Starting January 1, 2025, Texas has an act granting Texas residents several key rights over their personal data. It also establishes privacy protection safeguards which apply to companies that “conduct business in [Texas] or produce a product or service consumed by residents of [Texas]” and that collect, use, store, sell, share, analyze, or process consumers’ personal data. “Personal data” generally means any information, including sensitive data, that is linked or reasonably linkable to an identified or identifiable individual.

Precision Polygraph of Texas ("PPoT") recognizes this new act.

It is exempt because of its size as a small business. Small businesses (as defined by the federal Small Business Administration) are generally exempt from the Act, except that if a small business sells the sensitive data of a consumer, it must first obtain the consumer’s consent. “Sensitive data” includes precise geolocation data and also the personal data of a child under the age of 13. 

PPoT does not sell such data.

• PPoT collects name, email, phone number, and basic data online when appointments are made.
• PPoT has a third-party process credit card data when an initial payment is made. PPoT does not see credit card numbers.
• Examinees are welcome to change their name, email, phone number, or other basic data upon their request.
• PPoT retains data per the standards of practice of the American Polygraph Association.
• PPoT collects additional personal and biometric data when the Examinee is in a polygraph examination.
• PPoT does not sell any data.

Updated April 9, 2025