This subchapter does not apply to:

1. (1) a person who is required to maintain and disseminate a privacy policy under:

   1. (A) the Gramm-Leach-Bliley Act (15 U.S.C. Sections 6801 to 6809);
   2. (B) the Family Educational Rights and Privacy Act of 1974 (20 U.S.C. Section 1232g); or
   3. (C) the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. Section 1320d et seq.);
2. (2) a covered entity under rules adopted by the commissioner of insurance relating to insurance consumer health information privacy or insurance consumer financial information privacy;
3. (3) a governmental body, as defined by Section 552.003, Government Code, other than a municipally owned utility;
4. (4) a person with respect to a loan transaction, if the person is not engaged in the business of making loans; or
5. (5) a person subject to Section 901.457, Occupations Code.

Added by Acts 2007, 80th Leg., R.S., Ch. 885 (H.B. 2278), Sec. 2.01, eff. April 1, 2009.

Acts 2009, 81st Leg., R.S., Ch. 87 (S.B. 1969), Sec. 4.009(a), eff. September 1, 2009.