Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)
Texas's biometric privacy rule: inform and obtain consent before capturing fingerprints, face or hand geometry, iris or retina scans or voiceprints for a commercial purpose; no sale or disclosure except in four cases; protect with reasonable care; destroy within a year after the purpose ends, which for employer security uses is termination. Attorney general enforcement, up to 25,000 dollars per violation.
Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) is a compliance framework from United States (Texas) with 2 domains and 7 controls that map to 2 other frameworks. The largest domains are Handling, disclosure and destruction – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) (5 controls), Notice and consent before capture – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) (2 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (2)
Handling, disclosure and destruction – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)
| Code | Title |
|---|---|
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(c)(1) | 503.001(c)(1) Do not sell, lease or disclose biometric identifiers except in four cases |
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(c)(2) | 503.001(c)(2) Store, transmit and protect with reasonable care |
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(c)(3) | 503.001(c)(3) Destroy within a reasonable time, at the latest one year after the purpose expires |
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(c-1) | 503.001(c-1) Identifiers tied to documents kept longer under other law |
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(c-2) | 503.001(c-2) Employer security identifiers: purpose ends with the employment |
Notice and consent before capture – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)
| Code | Title |
|---|---|
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(b)(1) | 503.001(b)(1) Inform the individual before capturing a biometric identifier |
| texas-capture-or-use-of-biometric-identifier-act-cubi-business-and-commerce-code-503-001::503.001(b)(2) | 503.001(b)(2) Obtain the individual's consent before capture |
Maps to 2 other frameworks
Coverage is not the same as your position
This page shows what Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) and who does it apply to?
Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) is a compliance framework from United States (Texas) with 2 domains and 7 controls. Texas's biometric privacy rule: inform and obtain consent before capturing fingerprints, face or hand geometry, iris or retina scans or voiceprints for a commercial purpose; no sale or disclosure except in four cases; protect with reasonable care; destroy within a year after the purpose ends, which for employer security uses is termination. Attorney general enforcement, up to 25,000 dollars per violation. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) actually require?
Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) has 7 controls organised across 2 domains. The largest domains are Handling, disclosure and destruction – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) (5 controls), Notice and consent before capture – Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) (2 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) do I already cover?
Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) maps to 2 other compliance frameworks. The top mapping partners are Illinois Biometric Information Privacy Act (BIPA) (86% coverage), GDPR (43% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)?
Start your Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 7 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 820 frameworks.
Get Started Free →Free forever — no credit card required