Workplace privacy law · TX
Texas workplace electronic monitoring law and what it means for organizational health intelligence.
The governing statute is Tex. Penal Code § 16.02. One-party consent for the interception of communications.
Texas CUBI is similar to Illinois BIPA in scope but lacks the private right of action — enforcement is through the Attorney General with civil penalties. Aggregate text-based analytics is outside CUBI scope.
Consent posture
One-party consent
Primary citation
Tex. Penal Code § 16.02
Enforcement
Texas Attorney General.
Notification requirements in Texas
- Separate consent regime for biometric data
Other relevant Texas statutes
Capture or Use of Biometric Identifier (CUBI), Tex. Bus. & Com. Code § 503.001
Requires informed consent before capturing or using biometric identifiers (fingerprint, voiceprint, retina/iris scan, or hand or face geometry). Civil penalty up to $25,000 per violation. Enforcement by Texas Attorney General — no private right of action (unlike Illinois BIPA).
Texas Data Privacy and Security Act (effective Jul 1, 2024)
Comprehensive privacy law. Employee-relationship exemption applies.
Employer obligations
- Federal Electronic Communications Privacy Act (18 U.S.C. § 2510 et seq.) applies. ECPA permits employer monitoring of business communications under the business-purpose and consent exceptions.
- CUBI: informed consent before capturing biometric identifiers (e.g., voiceprint).
- Reasonable security and a defined retention period for any biometric identifier collected.
How ClarityLift’s privacy posture maps to Texas law
ClarityLift surfaces team-level patterns from the conversations a customer already has in Slack or Teams. The architecture is privacy-first by design. No DMs. Ever. Aggregate signals only. Minimum group threshold of 10. No individual scores. Customers retain full control of which channels are connected.
For employers operating in Texas, the relevant requirements typically resolve at the policy and channel-selection layer, not the technical layer. ClarityLift does not record voice or video, so one-party consent statutes for audio/video recording are structurally inapplicable.
Compliance with Tex. Penal Code § 16.02 is achieved by the customer through written notice to employees (where required), an acceptable-use policy, and clear channel-connection scope. ClarityLift’s consent architecture supports this directly: every connected workspace surfaces the channel list, retention posture, and group-floor minimum to admins.
This is not legal advice. Employers should review their specific monitoring practices with counsel before deploying any workplace analytics tool.
Frequently asked
Does ClarityLift read individual employee messages?
No. ClarityLift processes communication signals at the aggregate team level. No individual scores are produced. The minimum group threshold of 10 is structurally prevented in code — teams below that floor never surface signals.
What does Texas consider a "private" communication for monitoring purposes?
Under Tex. Penal Code § 16.02, the operative question is whether the communication was made with a reasonable expectation of privacy. Workplace channels under an acceptable-use policy that defines them as business communications generally fall within the business-purpose exception. DMs and personal channels are different — and ClarityLift excludes them by design.
Are DMs ever processed by ClarityLift?
No. DMs are rejected at the ingest gate before any classification, signal generation, or storage. This is structurally prevented, not a policy choice.
Does the biometric statute apply to ClarityLift?
Texas biometric privacy law applies to the capture of biometric identifiers — fingerprints, voiceprints, face geometry, and similar. ClarityLift does not capture biometric identifiers. Communication signals are derived from text only.
See ClarityLift’s privacy architecture before you deploy in Texas.
Aggregate signals only. No DMs. Minimum group threshold of 10. The compliance posture is built into the architecture, not bolted on after.