Internal prototype — noindexed, not linked from public navigation yet.

Tex. Business & Commerce Code § 521.051

This is the official text of Tex. Business & Commerce Code § 521.051, part of Texas’s Business & Commerce Code — governs commercial transactions and general business practices.

Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.

§ 521.051. UNAUTHORIZED USE OR POSSESSION OF PERSONAL IDENTIFYING INFORMATION.

Official statutory text

(a) A person may not obtain, possess, transfer, or use personal identifying information of another person without the other person's consent or effective consent and with intent to obtain a good, a service, insurance, an extension of credit, or any other thing of value in the other person's name.

(a-1) For purposes of this section, "effective consent" includes consent given by a person legally authorized to act on behalf of the person from whom consent is required. Consent is not effective if:

(1) induced by force, threat, fraud, or coercion; or

(2) given by a person who by reason of youth, mental illness, or intellectual disability is known by the actor to be unable to make reasonable decisions.

(b) It is a defense to an action brought under this section that an act by a person:

(1) is covered by the Fair Credit Reporting Act (15 U.S.C. Section 1681 et seq.); and

(2) is in compliance with that Act and regulations adopted under that Act.

(c) This section does not apply to:

(1) a financial institution as defined by 15 U.S.C. Section 6809; or

(2) a covered entity as defined by Section 601.001 or 602.001, Insurance Code.

Status: in_force · Read it on the official government site

About this page: Statute text is reproduced from official government publishers via the Open US Law dataset (Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine (Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.