For Texas Small Businesses
Is Your Texas Business In "Safe Harbor"?
Texas SB 2610 isn't just for law firms — any business that handles Texans' personal data can earn an affirmative defense by maintaining a documented cybersecurity program. Enter your domain or email for an instant audit.
Texas Cybersecurity Safe Harbor (SB 2610)
The law scales with your headcount. Maintain a documented program sized to your business and you gain an affirmative defense against punitive damages if a breach ever leads to a lawsuit.
Tier 1: Under 20 Employees
Requires strict access controls (unique accounts + least privilege), documented password policies with mandatory MFA, and regular security awareness training.
Tier 2: 20-99 Employees
Requires active asset & software inventory, continuous automated vulnerability management, endpoint protection, and tested data recovery backups.
Tier 3: 100-249 Employees
Requires full alignment with NIST CSF or ISO 27001, advanced 24/7 threat detection, and rigorous third-party risk management.
The Golden Rule: Document everything and formally review your program annually.
Get into Safe Harbor
We fix what the audit finds and build the documented program SB 2610 rewards — sized to your business, not an enterprise.
See Services & PricingTexas OAG Watch
Texas Breach Reports: 2026 YTD
SB 2610 applies to any Texas business handling personal data — not just law firms. The Texas AG publishes breach notices for incidents affecting Texans; below is the year-to-date picture from that public database.
Interactive Dashboard
Texas OAG Breach Reports: 2026 YTD
Published breach notices and affected Texans through Jul 17, 2026
Show largest 2026 breach reports
| Entity | Published | Texans affected | Sector |
|---|---|---|---|
| Conduent Business Services, LLC (revised submission) | May 20, 2026 | 12,784,367 | Healthcare / Medical |
| DentaQuest, LLC | Jul 17, 2026 | 3,973,000 | Healthcare / Medical |
| Texas Parks and Wildlife | Jun 26, 2026 | 3,087,721 | PII / Identity |
| Cerner Corporation | Jul 7, 2026 | 2,658,388 | Healthcare / Medical |
| Carnival Corporation | May 28, 2026 | 800,060 | Other |
Source: Texas Office of the Attorney General Data Security Breach Reports. Totals reflect published notices and may change as reports are updated.