Tex. Health and Safety Code § 181.052

(a) In this section, "financial institution" has the meaning assigned by Section 1101, Right to Financial Privacy Act of 1978 (12 U.S.C. Section 3401), and its subsequent amendments.

(b) To the extent that a covered entity engages in activities of a financial institution, or authorizes, processes, clears, settles, bills, transfers, reconciles, or collects payments for a financial institution, this chapter and any rule adopted under this chapter does not apply to the covered entity with respect to those activities, including the following:

(1) using or disclosing information to authorize, process, clear, settle, bill, transfer, reconcile, or collect a payment for, or related to, health plan premiums or health care, if the payment is made by any means, including a credit, debit, or other payment card, an account, a check, or an electronic funds transfer; and

(2) requesting, using, or disclosing information with respect to a payment described by Subdivision (1):

(A) for transferring receivables;

(B) for auditing;

(C) in connection with a customer dispute or an inquiry from or to a customer;

(D) in a communication to a customer of the entity regarding the customer's transactions, payment card, account, check, or electronic funds transfer;

(E) for reporting to consumer reporting agencies; or

(F) for complying with a civil or criminal subpoena or a federal or state law regulating the covered entity.