Title GV, Government Code

Sec. 2059.052. SERVICES PROVIDED TO INSTITUTIONS OF HIGHER EDUCATION. The command may provide network security services to an institution of higher education, and may include an institution of higher education in a center, only if and to the extent approved by the Information Tec…

Sec. 2059.053. RULES. The command may adopt rules necessary to implement this chapter. Added by Acts 2005, 79th Leg., Ch. 760 (H.B. 3112), Sec. 1, eff. September 1, 2005. Amended by: Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 31, eff. September 1, 2025.

Sec. 2059.054. OWNERSHIP OR LEASE OF NECESSARY EQUIPMENT. The command may purchase in accordance with Chapters 2155, 2156, 2157, and 2158 any facilities or equipment necessary to provide network security services to state agencies. Added by Acts 2005, 79th Leg., Ch. 760 (H.B. 311…

Sec. 2059.055. RESTRICTED INFORMATION. (a) Confidential network security information may be released only to officials responsible for the network, law enforcement, the state auditor's office, and agency or elected officials designated by the command. (b) Network security informa…

Sec. 2059.056. RESPONSIBILITY FOR EXTERNAL AND INTERNAL SECURITY THREATS. If the command provides network security services for a state agency or other entity under this chapter, the command is responsible for network security from external threats for that agency or entity. Netw…

Sec. 2059.057. BIENNIAL REPORT. (a) The command shall biennially prepare a report on: (1) the command's accomplishment of service objectives and other performance measures under this chapter; and (2) the status, including the financial performance, of the consolidated network sec…

Sec. 2059.058. AGREEMENT TO PROVIDE NETWORK SECURITY SERVICES TO ENTITIES OTHER THAN STATE AGENCIES. In addition to the command's duty to provide network security services to state agencies under this chapter, the command by agreement may provide network security services to: (1)…

Sec. 2059.101. NETWORK SECURITY CENTER. The command shall establish a network security center to provide network security services to state agencies. Added by Acts 2005, 79th Leg., Ch. 760 (H.B. 3112), Sec. 1, eff. September 1, 2005. Amended by: Acts 2025, 89th Leg., R.S., Ch. 33…

Sec. 2059.102. MANAGEMENT AND USE OF NETWORK SECURITY SYSTEM. (a) The command shall manage the operation of network security system services for all state agencies at the center. (b) The command shall fulfill the network security requirements of each state agency to the extent pr…

Sec. 2059.103. CENTER LOCATION AND PHYSICAL SECURITY. (a) The command shall locate the center at a location that has an existing secure and restricted facility, cyber-security infrastructure, available trained workforce, and supportive educational capabilities. (b) The command sh…

Sec. 2059.104. CENTER SERVICES AND SUPPORT. (a) The command shall provide the following managed security services through the center: (1) real-time network security monitoring to detect and respond to network security events that may jeopardize this state and the residents of thi…

Sec. 2059.105. NETWORK SECURITY GUIDELINES AND STANDARD OPERATING PROCEDURES. (a) The command shall adopt and provide to all state agencies appropriate network security guidelines and standard operating procedures to ensure efficient operation of the center with a maximum return …

Sec. 2059.1055. NETWORK SECURITY IN A STATE OF DISASTER. The department, in coordination with the command, shall disconnect the computer network of an entity receiving security services under this chapter from the Internet if the governor issues an order under Section 418.0195 to…

Sec. 2059.106. PRIVATE VENDOR. The command may contract with a private vendor to build and operate the center and act as an authorized agent to acquire, install, integrate, maintain, configure, and monitor the network security services and security infrastructure elements. Added …

Sec. 2059.151. PAYMENT FOR SERVICES. The department shall develop a system of billings and charges for services provided by the command in operating and administering the network security system that allocates the total state cost to each state agency or other entity served by th…

Sec. 2059.152. REVOLVING FUND ACCOUNT. (a) The comptroller shall establish in the state treasury a revolving fund account for the administration of this chapter. The account must be used as a depository for money received from state agencies and other entities served under this c…

Sec. 2059.153. GRANTS. The command may apply for and use for purposes of this chapter the proceeds from grants offered by any federal agency or other source. Added by Acts 2005, 79th Leg., Ch. 760 (H.B. 3112), Sec. 1, eff. September 1, 2005. Amended by: Acts 2025, 89th Leg., R.S.…

Sec. 2060.001. DEFINITION. In this chapter, "commission" means the Interagency Data Transparency Commission. Added by Acts 2015, 84th Leg., R.S., Ch. 639 (S.B. 1844), Sec. 1, eff. September 1, 2015.

Sec. 2060.002. COMMISSION CREATED. The commission is created to study and review: (1) the current public data structure, classification, sharing, and reporting protocols for state agencies; and (2) the possibility of collecting and posting data from state agencies online in an op…

Sec. 2060.003. STUDY. The study conducted by the commission must consider methods to: (1) structure, classify, and share data among state agencies; (2) more efficiently gather and process data; (3) collect and post data online in an open source format that is machine-readable, ex…

Sec. 2060.004. REPORT. (a) Not later than September 1, 2016, the commission shall provide to the governor, lieutenant governor, and speaker of the house of representatives a final report on data reporting practices by state agencies. The report must include: (1) recommendations f…

Sec. 2060.005. MEMBERS OF THE COMMISSION. (a) The commission is composed of the following members: (1) two representatives from the Department of Information Resources, appointed by the executive director of the department; (2) a representative of the Texas Legislative Council, a…

Sec. 2060.006. ASSISTANCE BY STATE AGENCIES. The comptroller or a state agency with a representative on the commission shall provide any assistance the commission requires to perform the commission's duties. Added by Acts 2015, 84th Leg., R.S., Ch. 639 (S.B. 1844), Sec. 1, eff. S…

Sec. 2062.001. DEFINITIONS. In this chapter: (1) "Biometric identifier" has the meaning assigned by Section 560.001. (2) "Personal identifying information" includes a person's home address, home telephone number, personal cell phone number, personal e-mail address, driver's licen…

Sec. 2062.002. CONSENT REQUIRED BEFORE ACQUIRING, RETAINING, OR DISSEMINATING CERTAIN INFORMATION; RECORDS. (a) Except as provided by Subsection (b), a state agency may not: (1) use global positioning system technology, individual contact tracing, or technology designed to obtain…

Sec. 2062.003. CONSENT REQUIRED BEFORE DISSEMINATING CERTAIN PERSONAL IDENTIFYING INFORMATION; RECORDS. (a) Except as provided by Subsection (b), a state agency may not, without written consent, disseminate to any person the personal identifying information of a person who submit…

Sec. 2063.001. DEFINITIONS. In this chapter: (1) "Chief" means the chief of the Texas Cyber Command. (2) "Command" means the Texas Cyber Command established under this chapter. (3) "Covered entity" means a private entity operating critical infrastructure or a local government tha…

Sec. 2063.002. ORGANIZATION. (a) The Texas Cyber Command is a state agency. (b) The command is governed by a chief appointed by the governor and confirmed with the advice and consent of the senate. The chief serves for a two-year term expiring February 1 of each odd-numbered year…

Sec. 2063.0025. COMMAND CHIEF. (a) In this section, "state cybersecurity program" means the policies, standards, procedures, elements, structure, strategies, objectives, plans, metrics, reports, services, and resources that establish the cybersecurity function for this state. (b)…

Sec. 2063.003. ESTABLISHMENT AND PURPOSE. (a) The command is established to prevent and respond to cybersecurity incidents that affect governmental entities and critical infrastructure in this state. (b) The command is responsible for cybersecurity for this state, including: (1) …

Sec. 2063.004. GENERAL POWERS AND DUTIES. (a) The command shall: (1) promote public awareness of cybersecurity issues; (2) develop cybersecurity best practices and minimum standards for governmental entities; (3) develop and provide training to state agencies and covered entities…

Sec. 2063.005. COST RECOVERY. The command may recover the cost of providing direct technical assistance, training services, and other services to covered entities when reasonable and practical. Added by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 1, eff. September 1, 202…

Sec. 2063.006. CYBERSECURITY EMERGENCY FUNDING. If a cybersecurity incident creates a need for emergency funding, the command may request that the governor or Legislative Budget Board make a proposal under Chapter 317 to provide funding to manage the operational and financial imp…

Sec. 2063.007. EMERGENCY PURCHASING IN RESPONSE TO CYBERSECURITY INCIDENT. (a) In the event the emergency response to a cybersecurity incident requires the command to purchase an item, the command is exempt from the requirements of Sections 2155.0755, 2155.083, and 2155.132(c) in…

Sec. 2063.008. PURCHASING OF CYBERSECURITY RESOURCES BY GOVERNMENTAL ENTITIES. (a) The command may not require, including by rule, governmental entities to purchase specific cybersecurity systems or resources. (b) The command may adopt guidelines designating the purchasing method…

Sec. 2063.009. RULES. The chief may adopt rules necessary for carrying out the purposes of this chapter. Added by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 1, eff. September 1, 2025.

Sec. 2063.010. APPLICATION OF SUNSET ACT. The command is subject to Chapter 325 (Texas Sunset Act). Unless continued in existence as provided by that chapter, the command is abolished September 1, 2031. Added by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 1, eff. Septemb…

Sec. 2063.011. LAWS NOT AFFECTED. (a) Except as specifically provided by this chapter, this chapter does not affect laws, rules, or decisions relating to the confidentiality or privileged status of categories of information or communications. (b) This chapter does not enlarge the…

Sec. 2063.101. BEST PRACTICES AND MINIMUM STANDARDS FOR CYBERSECURITY AND TRAINING. (a) The command shall develop and annually assess best practices and minimum standards for use by governmental entities to enhance the security of information resources in this state. (b) The comm…

Sec. 2063.102. STATE CERTIFIED CYBERSECURITY TRAINING PROGRAMS. (a) The command, in consultation with the cybersecurity council established under Section 2063.406 and industry stakeholders, shall annually: (1) certify at least five cybersecurity training programs for state and lo…

Sec. 2063.103. CYBERSECURITY TRAINING REQUIRED. (a) Each elected or appointed official and employee of a governmental entity who has access to the entity's information resources or information resources technologies shall annually complete a cybersecurity training program certifi…

Sec. 2063.104. CYBERSECURITY TRAINING REQUIRED: CERTAIN STATE CONTRACTORS. (a) In this section, "contractor" includes a subcontractor, officer, or employee of the contractor. (b) A state agency shall require any contractor who has access to a state computer system or database to …

Sec. 2063.201. CYBERSECURITY THREAT INTELLIGENCE CENTER. (a) In this section, "center" means the cybersecurity threat intelligence center established under this section. (b) The command shall establish a cybersecurity threat intelligence center. The center shall collaborate with …

Sec. 2063.202. CYBERSECURITY INCIDENT RESPONSE UNIT. (a) The command shall establish a dedicated cybersecurity incident response unit to: (1) detect and contain cybersecurity incidents in collaboration with the cybersecurity threat intelligence center under Section 2063.201; (2) …

Sec. 2063.203. DIGITAL FORENSICS LABORATORY. (a) The command shall establish a digital forensics laboratory to: (1) in collaboration with the cybersecurity incident response unit under Section 2063.202, develop procedures to: (A) preserve evidence of a cybersecurity incident, inc…

Sec. 2063.204. INFORMATION SHARING AND ANALYSIS ORGANIZATION. (a) The command shall establish at least one information sharing and analysis organization to provide a forum for state agencies, local governments, public and private institutions of higher education, and the private …