Identity Theft Enforcement and Protection Act (ITEP Act), Tex. Bus. & Comm. Code, Ch. 521 (full-text).
The Act states that businesses have a legal duty to protect and safeguard sensitive personal information. The Act requires businesses that collect or maintain sensitive personal information in the regular course of business to implement and maintain reasonable procedures and corrective measures to protect and safeguard that information from unlawful disclosure or use.