JD Key Consulting Logo
HB5081

Regular Session

Relating to the protection of personal identifying information of certain individuals in the judicial system; creating a criminal offense.

Critical
Medium Cost
Effective:2025-06-20
Enforcing Agencies

Local Law Enforcement/Prosecutors (Criminal provisions) • Office of Court Administration (Administrative facilitation of requests) • Texas Civil Courts (via private right of action)

HB5081
Relating to the protection of personal identifying information of certain individuals in the judicial system; creating a criminal offense.
Critical Urgency
Unanimous Passage
House Vote140 - 0
YEA
100% in favor140 voting
Senate Vote31 - 0
YEA
100% in favor31 voting
Cost Impact
Medium
Effective
2025-06-20
Enforcing Agencies
Local Law Enforcement/ProsecutorsOffice of Court AdministrationTexas Civil Courts
Primary Author: Rep. Jeff Leach
89th Texas Legislature
jdkey.com
01

Compliance Analysis

Key implementation requirements and action items for compliance with this legislation

Implementation Timeline

  • Effective Date: June 20, 2025 (Immediate effect due to supermajority vote).
  • Compliance Deadline: Immediate. You must be prepared to accept and process removal requests starting June 20, 2025. The law applies retroactively to data currently hosted on your sites.
  • Agency Rulemaking: The Office of Court Administration (OCA) is authorized to develop a centralized request system/portal, contingent on legislative appropriation. Until this system is funded and built, businesses must accept requests via standard channels (mail/email).

Immediate Action Plan

  • Designate a Channel: Immediately establish and publish a specific email address or physical address for HB5081 removal requests.
  • Test Takedown Speed: Conduct a drill to ensure your IT team can locate and remove specific records across all platforms within 10 business days.
  • Review Insurance: Audit Cyber Liability and D&O policies to confirm coverage for "regulatory fines" and privacy statute violations.
  • Stop the Bleed: Configure your CRM or data sales platforms to automatically flag and block records on your suppression list from being sold or republished.

Operational Changes Required

Contracts

  • Data Vendors (Upstream): Amend Master Services Agreements (MSAs) to require vendors to scrub lists against HB5081 suppression requests before delivery.
  • Subsidiaries: Execute binding internal directives ensuring subsidiary websites comply with removal requests received by the parent company, as the law holds the controlling entity liable.

Hiring/Training

  • Intake Training: Customer service and privacy teams must be trained to identify "HB5081 Removal Requests" immediately. These cannot be queued with standard GDPR/CCPA requests due to the strict 10-day deadline and potential criminal liability.
  • Verification Protocols: Staff must be trained on how to verify the validity of a request without creating delays that exceed the statutory window.

Reporting & Record-Keeping

  • Suppression Lists: Establish a permanent, secure internal "Do Not Publish/Do Not Sell" list containing the PII of individuals who have submitted requests.
  • Audit Logs: Maintain an immutable log recording: Date Request Received, Date Data Removed, and Confirmation Sent. This is your primary defense against the $500/day fine.

Fees & Costs

  • Civil Penalties: Budget for potential legal defense and civil penalties ($500 per day per violation) if the 10-day window is missed.
  • Damages: Be aware that plaintiffs can seek exemplary (punitive) damages and attorney's fees.

Strategic Ambiguities & Considerations

  • The OCA Portal Gap: The OCA is not *required* to build a centralized removal portal without specific funding. Businesses must prepare to receive requests via disparate channels (email, certified mail) rather than a standardized API or single source.
  • Verification Standards: The statute does not define the burden of proof for identity verification. Demanding excessive proof risks missing the 10-day deadline; accepting too little risks fraudulent takedowns.
  • Definition of "Control": Liability extends to subsidiary websites the entity "controls," but the threshold for control (e.g., franchisees, loose affiliates) remains undefined.

Need Help Understanding Implementation?

Our government affairs experts can walk you through this bill's specific impact on your operations.

Schedule Consultation

Information presented is for general knowledge only and is provided without warranty, express or implied. Consult qualified government affairs professionals and legal counsel before making compliance decisions.

02

Legislative Timeline

This bill's path through the Texas Legislature

Filed
Mar 13, 2025
Passed House
May 14, 2025
Passed Senate
May 26, 2025
Signed
Jun 20, 2025
TopicsBusiness & CommerceBusiness & Commerce--generalCourtsCourts--generalCourts--judgesCourts--personnelCrimesCrimes--against PersonsCrimes--against Persons--generalProtection of Personal InformationCourt Administration, Office ofCivil Remedies & Liabilities
03

House Authors

Rep. Jeff LeachRepublican · Primary Author

Senate Sponsors

Sen. Charles CreightonRepublican · Primary Sponsor
Cosponsors (1)

Bill Text(with markup)

View bill text in multiple formats on Texas Legislature website

Fiscal NoteView Original

Related Legislation

Explore more bills from this author and on related topics

More from Rep. Jeff Leach

View all bills by Rep. Jeff Leach

Related by Topic

View more Business & Commerce legislation
Quick Reference

Frequently Asked Questions

Common questions about HB5081

Q

What does Texas HB5081 do?

HB5081 mandates that any business hosting public data or selling personal information must remove the Personal Identifying Information (PII) of judges, court staff, and their families within 10 business days of a request. This law creates a strict "takedown" regime with immediate criminal liability and daily civil fines for non-compliance, affecting not just data brokers, but any entity with public-facing directories or marketing lists. Implementation Timeline Effective Date: June 20, 2025 (Immediate effect due to supermajority vote).

Q

Who authored HB5081?

HB5081 was authored by Texas Representative Jeff Leach during the Regular Session.

Q

When was HB5081 signed into law?

HB5081 was signed into law by Governor Greg Abbott on June 20, 2025.

Q

Which agencies enforce HB5081?

HB5081 is enforced by Local Law Enforcement/Prosecutors (Criminal provisions), Office of Court Administration (Administrative facilitation of requests) and Texas Civil Courts (via private right of action).

Q

How urgent is compliance with HB5081?

The compliance urgency for HB5081 is rated as "critical". Businesses and organizations should review the requirements and timeline to ensure timely compliance.

Q

What is the cost impact of HB5081?

The cost impact of HB5081 is estimated as "medium". This may vary based on industry and implementation requirements.

Q

What topics does HB5081 address?

HB5081 addresses topics including business & commerce, business & commerce--general, courts, courts--general and courts--judges.

Legislative data provided by LegiScanLast updated: November 25, 2025

Need Strategic Guidance on This Bill?

Need help with Government Relations, Lobbying, or compliance? JD Key Consulting has the expertise you're looking for.