HackFirstAidEducation
Regulatory grid

State overlay · TX

Texas

Texas Education Code 32.151 + HB 18 (Securing Children Online through Parental Empowerment Act)

Districts must inventory edtech, publish a parental control framework, and use the TEA-approved Student Data Privacy Agreement.

Notification window

Texas Business & Commerce Code 521.053: notify affected persons within 60 days; notify TX AG if 250+ residents.

Regulators

Texas Education Agency (TEA)

TEA Information Security; TEA cybersecurity coordinator.

Texas Attorney General

DataBreachReport@oag.texas.gov for 250+ resident incidents.

Region ESC

Your Education Service Center often coordinates state notification.

Unique gotchas

  • TEA requires districts to designate a cybersecurity coordinator under SB 820.
  • STAAR testing windows are state-administered — coordinate with TEA before pausing.

Testing authority

TEA Student Assessment Division (STAAR)