AUSTIN (June 2, 2025) – Small business owners in Texas are grateful that Senate Bill 2610 has passed the Legislature and is awaiting Governor Greg Abbott’s signature. The measure creates a legal safe harbor that protects small businesses from punitive damages if they become victims of a data breach, provided they have adopted an industry-recognized cybersecurity framework. The bill encourages Main Street businesses to invest in cybersecurity while reducing their legal exposure.

NFIB State Director Jeff Burdett said:

“Small businesses are relentlessly targeted by bad actors online, often resulting in the theft of sensitive information, reputational damage, and in some cases, data-breach lawsuits. This bill incentivizes the small business community to mitigate legal risk by investing in cybersecurity measures to safeguard sensitive data before a cyber-attack occurs. Under this law, Texas consumers and small businesses are safer from cyber criminals. We thank Sen. César Blanco and Rep. Giovanni Capriglione for their efforts on behalf of small businesses.”

Background:

In April, Eduardo Contreras, a member of the NFIB Texas Leadership Council and Governor Abbott’s Small Business Advisory Task Force, testified before the Senate Business & Commerce Committee in support of Senate Bill 2610.

During his testimony, Contreras said:

“I strongly support Senate Bill 2610 to support and protect our businesses and citizens from devastating cyberattacks. This bill provides incentive and guidance to small and medium-sized businesses on implementing reasonable cybersecurity controls, safeguarding sensitive personal data, and reducing economic harm.”

CLICK HERE to view the committee hearing (beginning ~13 min. mark).