Insurance Code Privacy Chapter (Gramm-Leach-Bliley implementation)
Texas Insurance Privacy Law
Financial · Health
Makes insurers and other TDI-authorized entities comply with the Gramm-Leach-Bliley Act's privacy notice and opt-out rules (15 U.S.C. 6802-6803) as if they were financial institutions, and directs the Commissioner to adopt privacy rules and safeguard standards.
- Where
- Texas
- Citation
- Tex. Ins. Code ch. 601 (601.001-601.102)
- Status
- In force
- In force since
- 2005-04-01
- Enforced by
- Texas Department of Insurance; Texas Attorney General after conferring with the Commissioner
- People can sue
- No
- Penalties
- Civil penalty up to $3,000 per violation, or up to $250,000 for a pattern or practice, plus injunctive or declaratory relief (601.102).
- Applies to
- Individuals and entities authorized by the Texas Department of Insurance (covered entities) (601.001(3))
- Nonaffiliated third parties receiving information from covered entities (601.002(b))
What a privacy notice must say
- Provide GLBA privacy notices (15 U.S.C. 6803) as a financial institution would.Tex. Ins. Code 601.002(a)
Rights it gives people
- Honor consumers' GLBA opt-out from disclosure of nonpublic personal information to nonaffiliated third parties (15 U.S.C. 6802).Tex. Ins. Code 601.002(a)
Practices it requires
- Nonaffiliated third parties may not reuse or redisclose information except as 15 U.S.C. 6802(c) allows.Tex. Ins. Code 601.002(b)
Security duties
- TDI implements GLBA safeguard standards under 15 U.S.C. 6805(b) by rule.Tex. Ins. Code 601.052
Sources
- Official text
- Tex. Ins. Code ch. 601 (Texas Legislature, Texas Constitution and Statutes)
- Tex. Ins. Code ch. 601, statute text file served by the Texas Legislative Council
Checked against these sources on 2026-09-24 by research agent (Claude), primary sources.
Unverified: TDI implementing rules (28 Tex. Admin. Code ch. 22) were not fetched.
Research reference, not legal advice.