Section 2054.603 - Security Breach Notification By State Agency(a) In this section: (1) "Security incident" means: (A) a breach or suspected breach of system security as defined by Section 521.053, Business & Commerce Code; and (B) the introduction of ransomware, as defined by Section 33.023, Penal Code, into a computer, computer network, or computer system.(2) "Sensitive personal information" has the meaning assigned by Section 521.002, Business & Commerce Code. (b) A state agency or local government that owns, licenses, or maintains computerized data that includes sensitive personal information, confidential information, or information the disclosure of which is regulated by law shall, in the event of a security incident : (1) comply with the notification requirements of Section 521.053, Business & Commerce Code, to the same extent as a person who conducts business in this state; (2) not later than 48 hours after the discovery of the security incident , notify: (A) the department, including the chief information security officer; or (B) if the security incident involves election data, the secretary of state; and (3) comply with all department rules relating to reporting security incidents as required by this section. (c) Not later than the 10th business day after the date of the eradication, closure, and recovery from a security incident , a state agency or local government shall notify the department, including the chief information security officer, of the details of the security incident and include in the notification an analysis of the cause of the security incident . (d) This section does not apply to a security incident that a local government is required to report to an independent organization certified by the Public Utility Commission of Texas under Section 39.151, Utilities Code. Tex. Gov't. Code § 2054.603
Renumbered from Tex. Gov't. Code § 2054.1125 and amended by Acts 2023, Texas Acts of the 88th Leg.- Regular Session, ch. 67,Sec. 1, eff. 9/1/2023.Amended by Acts 2019, Texas Acts of the 86th Leg.- Regular Session, ch. 509,Sec. 14, eff. 9/1/2019.Amended by Acts 2017, Texas Acts of the 85th Leg. - Regular Session, ch. 683,Sec. 8, eff. 9/1/2017.Added by Acts 2009, 81st Leg., R.S., Ch. 419, Sec. 4, eff. 9/1/2009.