The Comptroller of Public Accounts, its divisions, and its associated companies (CPA or "we") values and protects the public's (your) privacy and places strict controls on the gathering and use of sensitive information and confidential information. Sensitive information and confidential information is not disclosed, made available, or otherwise used for purposes other than those specified at the time of collection, except with your consent or as authorized by law or regulation.
As a public agency, CPA understands the importance of maintaining your privacy and will make every attempt to maintain your trust and confidence regarding the collection and use of your sensitive and confidential information.
This policy has been developed and is maintained in accordance with all applicable Texas and federal laws and regulations and will be updated from time to time. Please review this page frequently.
Pursuant to Texas House Bill 855 (2015), CPA's websites are compatible with Microsoft Internet Explorer, Google Chrome, and Apple Safari.
The voluntary disclosure of sensitive information or confidential information to CPA, whether solicited or unsolicited, via physical or electronic means constitutes your consent to the collection and disclosure of the information by CPA for the purposes for which the information was disclosed to CPA, as was reasonably ascertainable from the nature and terms of the disclosure, including collection and disclosure for the purpose of validating your identity.
CPA's websites collect and store information each time you access them to enable us to measure the total number of visitors, and certain non-personal statistical information. This helps us make our websites more accessible and useful to visitors.
If you browse through our sites reading, printing, or downloading information, no sensitive information and no confidential information about you is collected.
The information we collect when you visit CPA's sites consists of:
If you communicate with CPA by sending an email, your email address may be retained for further communication with you in connection with processing your request or as provided by law. Do not send any sensitive or confidential information in the body of, or as an attachment to, an electronic mail message unless the data is adequately encrypted. Data sent via email is not inherently secured or encrypted. Any information contained in an email message or attachment may be retained and stored by CPA pursuant to the applicable retention period or as provided by law and may be provided to other state agencies to better serve your needs.
In addition, CPA collects the email addresses of those individuals who voluntarily provide their email address at Comptroller.Texas.gov and on other platforms, such as Facebook.
Further, email addresses and other volunteered information may be used to send news, notices, and other information to those who request it on a strictly opt-in basis. Email addresses may also be used to serve interest-based ads on other platforms, such as Facebook.
In the spirit of open, transparent government, CPA makes use of social media tools (e.g. Facebook, Twitter, YouTube, etc.) to keep the public informed of news, economic updates, and other announcements.
Any comments or posts made to a social media forum maintained by CPA may be subject to release to the public as required by the Texas Public Information Act.
Users of these social media services are bound by terms of service and user agreements for the platform.
CPA gathers your information through lawful means. Any subsequent use of the information is limited to purposes consistent with the purpose(s) given at the time of collection.
You are responsible for protecting the confidentiality of any user ID, password, or PIN used to access CPA websites. If you give your user ID, password, or PIN to anyone else, they will be able to access your sensitive and confidential information.
CPA does not sell or distribute your information to any non-governmental third party without your consent or as authorized by law or regulation. CPA's employees will only use sensitive and confidential information submitted by you on a need-to-know basis to provide information or services, or carry out the duties of the office.
Further, we will not disclose information we collect from you to third parties without your permission except to the extent necessary including:
It is possible to opt-out of data collection by these third parties by visiting:
Information collected by or provided to CPA will be retained and maintained as required by law or regulation such as Texas Government Code Section 441.180 et seq. Different types of information are required to be kept for different periods of time.
CPA stores or uses sensitive and confidential information submitted by you only for the time necessary. Confidential information is destroyed via purging, magnetic degaussing/erasing, shredding, and/or other means of authorized confidential destruction when no longer required and to prevent unauthorized access or use of the data. Regularly scheduled archiving, purging, and proper disposal of records and information is a standard practice throughout CPA.
CPA's public facing websites and systems, as well as internal systems, have reasonable security measures in place to protect against the loss, misuse, and alteration of your data and information that is under our control. Interactive applications and forms that collect transaction payments, sensitive or confidential information are encrypted using privacy and security safeguards such as a Secure Socket Layer (SSL) session or similar technology.
Appropriate computer, network, and Internet technical security controls at the employee and departmental level prevent unauthorized access to information voluntarily provided by you. Some of these security controls are: password and user identification verification, data encryption, confidential transmissions, secure storage areas, and audit trails. CPA's employees are educated regarding the requirements of working with sensitive and confidential information as well as the consequences of misuse.
With few exceptions, you have the right to request, receive, and review your information with CPA. You are also entitled to have us correct any information about you in our possession that may be incorrect.
To request information from CPA, please submit your request via one of the methods listed below and ensure your request includes enough description and detail so we may accurately identify and locate your information.
Open Records Section
Comptroller of Public Accounts
P.O. Box 13528
Austin, TX 78711-3528
Open Records Section
Comptroller of Public Accounts
111 E. 17th St.
LBJ State Office Bldg., Ste. 210
Austin, TX 78701
If you require special accommodation pursuant to the Americans with Disabilities Act, please contact our Workplace Accommodations Coordinator at 512-475-3560.
If you have questions, comments, or concerns about CPA's Privacy and Security Policy, please contact Information Security's Privacy Office:
Comptroller of Public Accounts
P.O. Box 13528, Capital Station
Austin, TX 78711-3528
CPA's websites contain links to other websites for your information and convenience. CPA has no control over the privacy practices or the content of such other websites. Please review the privacy information provided by these sites.
The responsibility for the content and accuracy of information on sites accessed by linking from our websites rests with the entities providing the information. This includes any responsibility for updating information upon which visitors may rely.
The inclusion of links from our sites to others does not imply any endorsement by CPA of any product, service, or vendor. Any mention of products, services, or vendors is for informational purposes only.
Information on CPA's sites is public domain and may be copied and used as permitted by law, with the exception of pictures, official symbols, and service marked names and logos. While CPA attempts to maintain a high degree of accuracy, we will not be held liable for errors or omissions that may occur.
CPA is not an operator of a website or online service directed at children under 13 years of age and does not knowingly collect sensitive and confidential information from children. Users are cautioned, however, that the collection of sensitive and confidential information via an interactive application or email will be treated as though it was submitted by an adult, and may, unless exempted from access by federal or state law, be subject to public access. CPA strongly encourages parents and teachers to be involved in children's Internet activities, and to provide guidance whenever children are asked to provide sensitive and confidential information online.
|Application Programming Interface (API)||a set of subroutine definitions, protocols, and tools for building application software. In general terms, it is a set of clearly defined methods of communication between various software components.|
|Confidential Information||Information typically excepted from public disclosure, whether specified in law or through a decision by the Open Records division of the Texas Attorney General's office. This includes Sensitive Personal Information (SPI), as defined by Texas Business and Commerce Code Section 521.|
|Cookie||A small piece of data sent from a website and stored in the user's web browser while the user is browsing it.|
|Internet Protocol (IP) Address||A unique string of numbers separated by periods that identifies each computer using the Internet Protocol to communicate over a network.|
|Internet Service Provider (ISP)||An organization that provides services for accessing, using, or participating in the Internet.|
|Public Information||Information available to the public freely and without reservation. Such information requires no authentication and is freely distributable by all agency personnel.|
|Regulated Information||Information typically controlled by federal or state regulation or other third-party agreement. This information may be confidential, sensitive, or public, but is subject to additional controls regarding its protection or disclosure.|
|Secure Socket Layer (SSL)||The standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.|
|Sensitive Information||Information subject to public release under an open records request. The information should be vetted and verified before release. This includes Personal Identifying Information (PII), as defined by Texas Business and Commerce Code Section 521.|
|Software Development Kit (SDK)||a set of software development tools that allows the creation of applications for a certain software package, software framework, hardware platform, computer system, video game console, operating system, or similar development platform.|
In 2015, the Texas Legislature passed House Bill 855, which requires state agencies to publish a list of the three most commonly used Web browsers on their websites. The Texas Comptroller’s most commonly used Web browsers are Google Chrome, Microsoft Internet Explorer and Apple Safari.