Contracts
You must immediately audit and amend Master Services Agreements (MSAs) with software vendors.
- Indemnification: Shift liability. Require vendors to indemnify your company for violations of HB149 caused by the software's architecture.
- Data Transparency: Mandate that vendors provide the "data lineage" and "training data descriptions" required by Sec. 552.103. If a vendor refuses to disclose how their AI works, you cannot legally deploy it under Texas law.
- Processor Duties: Cite the amendments to the Business & Commerce Code to compel data processors to assist in your security compliance assessments.
Hiring/Training
- AI Governance Lead: Designate a specific officer responsible for maintaining the "System Inventory" and "Performance Metrics."
- Staff Training: Employees using AI (HR recruiters, customer service managers) must be trained on the new disclosure mandates.
- Prohibited Actions: Strictly forbid marketing and security teams from using tools that scrape biometric data (facial recognition) from social media or open web sources without explicit consent.
Reporting & Record-Keeping
To utilize the "Right to Cure" (avoiding penalties), you must be able to produce the following upon AG demand:
- System Inventory: A catalog of every AI tool in use, its purpose, and intended benefits.
- Data Lineage: Documentation of the data categories used to train the system.
- Performance Metrics: Written records of how you test the system for accuracy and bias.
- Post-Deployment Monitoring: Proof of human oversight.
Fees & Costs
- Civil Penalties:
- Curable: $10,000 - $12,000 per violation.
- Uncurable: $80,000 - $200,000 per violation.
- Continuing: Up to $40,000 per day.
- Budget Impact: The Legislature has appropriated over $4 million annually for the AG to hire expert witnesses and machine learning engineers. They are funded to litigate; budget for increased legal defense and Tech E&O insurance premiums.