Tex. Business & Commerce Code § 506.003
This is the official text of Tex. Business & Commerce Code § 506.003, part of Texas’s Business & Commerce Code — governs commercial transactions and general business practices.
Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.
§ 506.003. PROHIBITED ACTS.
Official statutory text
(a) A person may not:
(1) reidentify or attempt to reidentify personal identifying information about an individual who is the subject of covered information; or
(2) knowingly disclose or release covered information that was reidentified in violation of this section.
(b) It is a defense to a civil action or prosecution for a violation of this section that:
(1) the person:
(A) was reidentifying the covered information for the purpose of a study or other scholarly research, including performing an evaluation or test of software intended to deidentify information; and
(B) did not release or publish the names or other information identifying any subjects of the reidentified covered information; or
(2) the person obtained informed, written consent from the individual who is the subject of the covered information that specifically referenced the information to be reidentified, disclosed, or released, and authorized the reidentification, disclosure, or release of that information.
(1) reidentify or attempt to reidentify personal identifying information about an individual who is the subject of covered information; or
(2) knowingly disclose or release covered information that was reidentified in violation of this section.
(b) It is a defense to a civil action or prosecution for a violation of this section that:
(1) the person:
(A) was reidentifying the covered information for the purpose of a study or other scholarly research, including performing an evaluation or test of software intended to deidentify information; and
(B) did not release or publish the names or other information identifying any subjects of the reidentified covered information; or
(2) the person obtained informed, written consent from the individual who is the subject of the covered information that specifically referenced the information to be reidentified, disclosed, or released, and authorized the reidentification, disclosure, or release of that information.
Status: in_force · Read it on the official government site
Dealing with a business matter in Texas?
See all Texas Business lawyers
About this page: Statute text is reproduced from official government publishers via the
Open US Law dataset
(Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine
(Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.