Tex. Business & Commerce Code § 324.051
This is the official text of Tex. Business & Commerce Code § 324.051, part of Texas’s Business & Commerce Code — governs commercial transactions and general business practices.
Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.
§ 324.051. UNAUTHORIZED COLLECTION OR CULLING OF PERSONALLY IDENTIFIABLE INFORMATION.
Official statutory text
A person other than the owner or operator of the computer may not knowingly cause computer software to be copied to a computer in this state and use the software to:
(1) collect personally identifiable information through intentionally deceptive means:
(A) by using a keystroke-logging function; or
(B) in a manner that correlates that information with information regarding all or substantially all of the websites visited by the owner or operator of the computer, other than websites operated by the person collecting the information; or
(2) cull, through intentionally deceptive means, the following kinds of personally identifiable information from the consumer's computer hard drive for a purpose wholly unrelated to any of the purposes of the software or service described to an owner or operator of the computer:
(A) a credit or debit card number;
(B) a bank account number;
(C) a password or access code associated with a credit or debit card number or a bank account;
(D) a social security number;
(E) account balances; or
(F) overdraft history.
(1) collect personally identifiable information through intentionally deceptive means:
(A) by using a keystroke-logging function; or
(B) in a manner that correlates that information with information regarding all or substantially all of the websites visited by the owner or operator of the computer, other than websites operated by the person collecting the information; or
(2) cull, through intentionally deceptive means, the following kinds of personally identifiable information from the consumer's computer hard drive for a purpose wholly unrelated to any of the purposes of the software or service described to an owner or operator of the computer:
(A) a credit or debit card number;
(B) a bank account number;
(C) a password or access code associated with a credit or debit card number or a bank account;
(D) a social security number;
(E) account balances; or
(F) overdraft history.
Status: in_force · Read it on the official government site
Dealing with a business matter in Texas?
See all Texas Business lawyers
About this page: Statute text is reproduced from official government publishers via the
Open US Law dataset
(Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine
(Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.