Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)
Notice and consent before capture – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)

Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) 503.001(b)(2): 503.001(b)(2) Obtain the individual's consent before capture

The person must also receive the individual's consent to capture the biometric identifier before capturing it for a commercial purpose. Under (b-1), added in 2025, the fact that an image or other media containing the individual's biometric identifiers is on the internet or another public source does not mean the individual was informed or consented, unless the individual personally made it public.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

GDPR · 1 control

  • GDPR-Art.9 Processing of special categories of personal data

Illinois Biometric Information Privacy Act (BIPA) · 1 control

  • 15(b)(3) Written release executed by the subject or representative before collection

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Notice and consent before capture – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) controls