| 1 | 1 | | 89R13505 SCR-D |
|---|
| 2 | 2 | | By: Garcia Hernandez H.B. No. 4636 |
|---|
| 3 | 3 | | |
|---|
| 4 | 4 | | |
|---|
| 5 | 5 | | |
|---|
| 6 | 6 | | |
|---|
| 7 | 7 | | A BILL TO BE ENTITLED |
|---|
| 8 | 8 | | AN ACT |
|---|
| 9 | 9 | | relating to the collection and disclosure of a consumer's driving |
|---|
| 10 | 10 | | and precise geolocation data. |
|---|
| 11 | 11 | | BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: |
|---|
| 12 | 12 | | SECTION 1. Section 541.001, Business & Commerce Code, is |
|---|
| 13 | 13 | | amended by adding Subdivision (27-a) and amending Subdivision (29) |
|---|
| 14 | 14 | | to read as follows: |
|---|
| 15 | 15 | | (27-a) "Real-time driving data" means information |
|---|
| 16 | 16 | | collected in real time relating to a consumer's behavior while |
|---|
| 17 | 17 | | driving an automobile, including acceleration, braking, location, |
|---|
| 18 | 18 | | speed, and start and stop time of an automobile trip. |
|---|
| 19 | 19 | | (29) "Sensitive data" means a category of personal |
|---|
| 20 | 20 | | data. The term includes: |
|---|
| 21 | 21 | | (A) personal data revealing racial or ethnic |
|---|
| 22 | 22 | | origin, religious beliefs, mental or physical health diagnosis, |
|---|
| 23 | 23 | | sexuality, or citizenship or immigration status; |
|---|
| 24 | 24 | | (B) genetic or biometric data that is processed |
|---|
| 25 | 25 | | for the purpose of uniquely identifying an individual; |
|---|
| 26 | 26 | | (C) personal data collected from a known child; |
|---|
| 27 | 27 | | [or] |
|---|
| 28 | 28 | | (D) precise geolocation data; or |
|---|
| 29 | 29 | | (E) real-time driving data. |
|---|
| 30 | 30 | | SECTION 2. Section 541.102, Business & Commerce Code, is |
|---|
| 31 | 31 | | amended by adding Subsection (d) to read as follows: |
|---|
| 32 | 32 | | (d) If a controller engages in the sale of personal data |
|---|
| 33 | 33 | | that is precise geolocation data, the controller shall include the |
|---|
| 34 | 34 | | following notice: |
|---|
| 35 | 35 | | "NOTICE: We may sell your precise geolocation data." The |
|---|
| 36 | 36 | | notice must be posted in the same location and in the same manner as |
|---|
| 37 | 37 | | the privacy notice described by Subsection (a). |
|---|
| 38 | 38 | | SECTION 3. This Act takes effect September 1, 2025. |
|---|