1. (a) A data broker that violates Section 510.004 or 510.005 is liable to this state for a civil penalty as prescribed by this section.

2. (b) A civil penalty imposed against a data broker under this section:

   1. (1) subject to Subdivision (2), may not be in an amount less than the total of:

      1. (A) $100 for each day the entity is in violation of Section 510.004 or 510.005; and
      2. (B) the amount of unpaid registration fees for each year the entity failed to register in violation of Section 510.005; and
   2. (2) may not exceed $10,000 assessed against the same data broker in a 12-month period.

3. (c) The attorney general may bring an action to recover a civil penalty imposed under this section. The attorney general may recover reasonable attorney's fees and court costs incurred in bringing the action.

   Redesignated from Business and Commerce Code, Chapter 509 by Acts 2025, 89th Leg., R.S., Ch. 204 (H.B. 1620), Sec. 22.001(3), eff. September 1, 2025.

Added by Acts 2023, 88th Leg., R.S., Ch. 963 (S.B. 2105), Sec. 1, eff. September 1, 2023.

Acts 2025, 89th Leg., R.S., Ch. 204 (H.B. 1620), Sec. 22.002(2), eff. September 1, 2025.