Texas · Senate Bill · 89th Regular Session
SB2490
Texas SB 2490 — Relating to biometric identifiers used in the performance of artificial intelligence

Status ● Introduced Effective Sep 1, 2025 Passage Likelihood L

WHAT THIS BILL REGULATES · 1 REQUIREMENT TYPE

How Is This Bill Enforced

Enforcement Authority
Enforcement authority unchanged from existing Texas Business & Commerce Code § 503.001. The existing statute provides enforcement by the attorney general. No private right of action exists under the base statute.
Private Right of Action
No private right of action. Enforcement is exclusive to the designated authority.
Penalties
The underlying statute (Tex. Bus. & Com. Code § 503.001) provides for civil penalties of up to $25,000 per violation, enforceable by the attorney general. The bill itself does not alter the penalty structure of the base statute.

What This Bill Requires

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text
Analysis & Obligations
Tex. Bus. & Com. Code § 503.001(a)
Definitions: artificial intelligence and biometric identifier

(a)(1) "Artificial intelligenceArtificial intelligence"Artificial intelligence" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, including computer vision, speech or natural language processing, and content generation.Tex. Bus. & Com. Code § 503.001(a)(1)" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, including computer vision, speech or natural language processing, and content generation.

(a)(2) "Biometric identifierBiometric identifier"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.Tex. Bus. & Com. Code § 503.001(a)(2)" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.

Section 1 of the bill amends subsection (a) of Tex. Bus. & Com. Code § 503.001 to restructure the existing definitions and add a new definition of artificial intelligence. The definition of biometric identifier is substantively unchanged but is renumbered as paragraph (2). These definitions establish the operative scope for the new AI exemption in subsection (f).

Tex. Bus. & Com. Code § 503.001(f)
AI exemption and secondary-use reattachment
DeployerDeveloper

(f) 1 This section does not apply to artificial intelligenceArtificial intelligence"Artificial intelligence" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, including computer vision, speech or natural language processing, and content generation.Tex. Bus. & Com. Code § 503.001(a)(1) or related training, processing, or storage, unless performed for the purpose of uniquely identifying a specific individual. If a biometric identifierBiometric identifier"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.Tex. Bus. & Com. Code § 503.001(a)(2) captured for the commercial purpose of artificial intelligenceArtificial intelligence"Artificial intelligence" means the use of machine learning and related technologies that use data to train statistical models for the purpose of enabling computer systems to perform tasks normally associated with human intelligence or perception, including computer vision, speech or natural language processing, and content generation.Tex. Bus. & Com. Code § 503.001(a)(1) is used for another and separate commercial purpose, the person possessing the biometric identifierBiometric identifier"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.Tex. Bus. & Com. Code § 503.001(a)(2) is subject to this section's provisions for the possession and destruction of a biometric identifierBiometric identifier"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.Tex. Bus. & Com. Code § 503.001(a)(2) and the associated penalties.

New subsection (f) is the operative heart of the bill. It creates a conditional exemption from the biometric identifier statute for artificial intelligence activities — specifically AI training, processing, and storage of biometric identifiers — unless the AI use is for the purpose of uniquely identifying a specific individual. This carve-out significantly narrows CUBI's reach for entities using biometric data in AI model development where individual identification is not the objective.

The second sentence addresses repurposing: if a biometric identifier originally captured for AI purposes is later used for a separate commercial purpose, the possessor becomes subject to the statute's existing requirements for possession, destruction, and associated penalties. This prevents entities from using the AI exemption as a backdoor to avoid CUBI obligations when they subsequently deploy biometric data for non-AI commercial identification or other regulated uses.

Compliance actions 1 item
1
Persons who capture biometric identifiersBiometric identifier"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.Tex. Bus. & Com. Code § 503.001(a)(2) for the commercial purpose of AI training, processing, or storage and who subsequently use those identifiers for a separate commercial purpose must comply with the statute's existing provisions for possession and destruction of biometric identifiersBiometric identifier"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or record of hand or face geometry.Tex. Bus. & Com. Code § 503.001(a)(2) and are subject to the associated penalties.
D-01.4
TX SB 2490, Section 2
Effective date

This Act takes effect September 1, 2025.

Section 2 sets the effective date at September 1, 2025, the standard Texas legislative effective date for the 89th Regular Session.

Passage Likelihood

Low
Status Introduced
Chamber No passage
Committee No action
Majority party Yes
Bipartisan No
Prior session None

Legislative History

2025-03-13 Received by the Secretary of the Senate
2025-03-13 Filed
2025-04-03 Read first time
2025-04-03 Referred to Business & Commerce

Entry Last Reviewed

2026-05-20
AI generated