After receiving a written request under Section 92.002 or 92.003, a person, including a data broker, shall:

1. (1) not later than the 10th business day after the date the request is received:

   1. (A) remove from the Internet website the covered information identified in the request;
   2. (B) ensure the information is not made available on any other publicly accessible Internet website or subsidiary website the person controls; and
   3. (C) identify any other instances of the information that should be removed; and
2. (2) assist the requestor in locating the covered information posted on any publicly accessible Internet website or subsidiary website controlled by the person.

Added by Acts 2025, 89th Leg., R.S., Ch. 672 (H.B. 5081), Sec. 2, eff. September 1, 2025.