Texas Data Breach Notification Deadline Calculator
Calculate required notification deadlines under the Texas Identity Theft Enforcement and Protection Act (ITEPA), Tex. Bus. & Com. Code § 521.053. Texas requires notification to affected individuals as expeditiously as possible — generally interpreted as within 60 days of discovery. Attorney General notification is required when 250+ Texas residents are affected.
Formula
Individual Notification Deadline
= Discovery Date + Law Enforcement Delay (if any) + 60 days
Attorney General Notification Deadline
= Same as Individual Notification Deadline, only if Texas residents affected ≥ 250
Law Enforcement Delay
= If a law enforcement agency determines that notification will impede a criminal investigation, notification may be delayed for the duration of that investigation. The clock resumes when law enforcement clears the delay.
Assumptions & References
- Primary Law: Texas Identity Theft Enforcement and Protection Act (ITEPA), Tex. Bus. & Com. Code §§ 521.001–521.053
- 60-Day Benchmark: Texas law requires notification "as expeditiously as possible." The Texas AG and legal consensus interpret this as no later than 60 days from discovery absent extenuating circumstances.
- AG Notification Threshold: Businesses must notify the Texas Attorney General when a breach affects 250 or more Texas residents (§ 521.053(i)), submitted concurrently with individual notifications.
- Covered Entities: Any person who conducts business in Texas and owns or licenses computerized data containing sensitive personal information of Texas residents.
- Sensitive Personal Information: Includes name + SSN, driver's license, financial account numbers, health/medical information, and government-issued ID numbers.
- Law Enforcement Delay: Notification may be delayed at the written request of a law enforcement agency (§ 521.053(f)). The delay period is added to the 60-day window.
- Exemptions: Entities regulated under HIPAA, GLB Act, or FCRA may satisfy Texas requirements by complying with those federal laws, provided the federal standard is at least as protective.
- AG Notification Portal: Texas AG Data Breach Notification
- Disclaimer: This calculator is for informational purposes only and does not constitute legal advice. Consult qualified legal counsel for breach response guidance.