Camera-related state law

The governing audio-recording statute is Texas Penal Code 16.02, which makes interception, use, or disclosure of a wire, oral, or electronic communication a felony unless an exception applies. The most-used commercial exception is one-party consent: if a participant in the conversation consents (which includes the person doing the recording), the interception is lawful. Texas is therefore a one-party consent state for audio.

Video-only surveillance is treated more permissively. Recording video in places where a person has no reasonable expectation of privacy is generally lawful, with two practical caveats. First, posted notice is the industry standard for any commercial property and many lease agreements require it. Second, hidden cameras in places where privacy is expected (restrooms, locker rooms, fitting rooms, hotel guest rooms) are off-limits and can trigger separate criminal exposure under Texas invasion-of-privacy and improper-photography theories.

Practical translation for a TX commercial install. Cameras with audio capture should be deployed only where the operator can document one-party consent or post unambiguous notice that audio is being captured. Most multi-site retailers, manufacturers, and warehouses default to video-only on the cameras and route audio capture through a separate documented intercom or voice-recording workflow.

Biometric data and the CUBI Act

Texas has an enacted biometric privacy statute. The Capture or Use of Biometric Identifier Act, Business and Commerce Code 503.001, prohibits a commercial entity from capturing a biometric identifier of an individual for a commercial purpose unless the person is informed before capture and consents to the capture. Biometric identifier under CUBI includes retina or iris scan, fingerprint, voiceprint, and record of hand or face geometry.

CUBI restricts sale, lease, or disclosure of a biometric identifier except in narrow circumstances, and it requires destruction of the identifier within a reasonable time, generally not later than the first anniversary of the date the purpose for collecting the identifier expires. Enforcement is by the Texas Attorney General with civil penalties per violation. Unlike Illinois BIPA, CUBI does not include a private right of action, but TX AG enforcement has produced multi-billion-dollar settlements against major technology companies in recent years.

For commercial security buyers, the practical reach is fingerprint and facial-recognition access control, voice-print authentication, and any AI camera that builds a faceprint template. CUBI compliance requires written informed-consent forms at the point of capture, a documented retention schedule, and a destruction process tied to employee separation or end of lawful purpose.

Privacy in the workplace

Texas does not have a single workplace electronic-monitoring statute. Pure video surveillance of common work areas with posted notice is the routine pattern. Cameras in employee-only spaces with a reasonable expectation of privacy (restrooms, locker rooms, lactation rooms) are off-limits and create exposure under invasion-of-privacy theories.

Most TX employers issue a single workplace surveillance notice in the employee handbook that covers cameras, badge access, computer monitoring, and call recording together. Audio capture by an employer is regulated by Penal Code 16.02 (one-party consent) and CUBI when voiceprints are involved. CCPA and out-of-state employee data rules can also reach TX-employed remote workers who reside in California or Illinois.

Cameras in production lines, retail floor, loading dock, and warehouse aisles are routine when paired with notice. Fingerprint or facial-recognition timeclocks are common in TX but trigger CUBI consent and retention obligations on every employee enrollment.

Public-place and common-area cameras

For commercial real estate, multi-tenant residential, retail, and hospitality, the practical rule set is consistent. Cameras in lobbies, hallways, exterior, parking, retail floor, and other non-private common areas are lawful with posted notice. Cameras in bathrooms, fitting rooms, hotel guest rooms, and any other space where privacy is expected are off-limits.

Multi-tenant residential operators in Texas should also review the bylaws and lease covenants. Hotel operators handle guest-room signage at the door and at the front desk and document any guest-area camera coverage in the property security plan. Municipal ordinances in Houston, Dallas, Austin, and San Antonio can add notice or registration requirements that go beyond state law for certain license categories (alarm permits, alcohol-licensed premises, parking facilities).

Video retention requirements

Texas has no single statewide video retention statute that applies to all commercial cameras. Retention is set by the regime that governs the industry.

  • Compassionate Use cannabis and hemp. Texas DPS and TDA publish coverage and retention rules for licensed operators. Pull the current published rules before designing the install.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage. Retention is typically 30 to 90 days at the facility, longer when an investigation is open.
  • Retail and hospitality with card data. PCI-DSS Requirement 9 specifies camera coverage of the cardholder data environment with 90-day retention.
  • K-12 special education. Texas Education Code 29.022 sets specific coverage and retention for self-contained special-education classroom cameras when requested.
  • TABC-licensed premises. Texas Alcoholic Beverage Commission regulations and local ordinances can impose retention requirements on bars, clubs, and certain alcohol-licensed venues.
  • Federal contractors and grantees. NDAA Section 889 controls vendor selection. Retention is contractor-driven through the SSP or grant award terms.

Default retention for TX commercial systems with no specific industry rule is 30 days. Operators in higher-risk industries set longer retention with explicit written retention policies.

Notable enforcement examples

Texas enforcement against businesses for biometric, surveillance, and data-handling issues runs through several channels. The Texas Attorney General has filed CUBI Act actions against major technology companies for capturing biometric identifiers (faceprints and voiceprints) without informed consent, with reported settlements in the multi-billion-dollar range. The TX AG also brings consumer protection actions under Chapter 521 against businesses with documented data security failures.

Federal HIPAA settlements have reached TX-based defendants where physical safeguards (facility access control, camera coverage of PHI areas) were a documented part of the breach. PCI assessor findings have triggered card brand penalties at TX retailers where camera coverage of the cardholder data environment was inadequate or retention was below 90 days. Real settlements are searchable on the TX AG and HHS OCR enforcement pages.

What Tec-Tel does to comply with Texas regulations

Tec-Tel installs across Texas for retail, manufacturing, healthcare, multi-tenant residential, financial, and hospitality customers. The default install pattern for a TX commercial site:

  • Video-only on cameras unless audio is documented with one-party consent under Penal Code 16.02.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, fitting rooms, hotel guest rooms, or other spaces where privacy is reasonably expected.
  • CUBI written-consent forms and a documented destruction schedule for any biometric capture (fingerprint timeclocks, facial-recognition access, voiceprint authentication).
  • Retention configured to the regime that governs the industry (HIPAA, PCI, DPS, NDAA), with the facility's written retention policy attached to the install package.
  • NDAA Section 889-compliant vendor selection on any federal-touching install. No Hikvision, Dahua, Hytera, Huawei, ZTE, or covered OEM relabels.
  • Multi-vendor architecture so the customer is not locked into one camera or VMS line as state and federal rules evolve.

This is a buyer-facing reference, not legal advice. For a specific Texas regulatory question, work with your privacy counsel.

Security service in Texas

Tec-Tel deploys AI-era security across Texas with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.