Texas Healthcare AI Compliance: Medical Records Privacy Act, HB 4 AI Requirements, and TMB Rules

Published February 25, 2026Reading time ~11 min

Texas operates a distinct healthcare regulatory framework that supplements HIPAA with state-specific medical records privacy requirements. The Texas Medical Records Privacy Act (TMRPA) at Texas Health and Safety Code Chapter 181 is Texas's equivalent of California's CMIA — it applies to healthcare AI systems in Texas and in some respects imposes requirements that differ from HIPAA. The Texas Medical Board (TMB) has issued guidance on telemedicine and AI-assisted care. Texas HB 4 (2023), the Texas Responsible AI Governance Act framework, represents Texas's emerging approach to AI regulation.

$5,000

Per-day penalty under the Texas Medical Records Privacy Act for ongoing violations (Texas Health and Safety Code §181.201)

The TMRPA at §181.201 provides for civil penalties of up to $5,000 per day for ongoing violations — separate from HIPAA penalties. The Texas Attorney General enforces TMRPA. Additionally, a patient whose records are disclosed in violation of TMRPA may sue for actual damages plus attorney fees. Like California's CMIA, Texas's TMRPA creates both regulatory and private litigation exposure for healthcare AI systems.

Texas Medical Records Privacy Act (TMRPA) — Health and Safety Code Chapter 181

Texas State Privacy Requirements for Healthcare AI

Authority: Texas Health and Safety Code Chapter 181 — Texas Medical Records Privacy Act
Enforcer: Texas Attorney General and civil courts
Penalty: Up to $5,000/day per violation for ongoing violations; private right of action for actual damages
Covered: Healthcare providers, health plans, and their vendors — includes AI vendors as covered entities
Key Difference: TMRPA applies to all medical records regardless of whether they are in electronic form — broader than HIPAA

Texas Medical Board Rules on AI-Assisted Care

The Texas Medical Board (TMB) has issued rules on telemedicine (22 Texas Admin. Code Chapter 190) that affect AI deployment in clinical settings. Key TMB positions:

Physician responsibility: AI cannot practice medicine; any AI-generated clinical recommendation requires physician review and authorization
Standard of care: TMB's telemedicine rules require that telemedicine (including AI-assisted telemedicine) meet the same standard of care as in-person care
Prescribing: AI-assisted prescribing tools must operate under direct physician supervision — AI cannot autonomously authorize or generate prescriptions

Texas HB 4 (2023) — Responsible AI Governance: Texas's HB 4 created the Texas Artificial Intelligence Advisory Council and directed study of AI use in state agencies and regulated industries including healthcare. While HB 4 did not create immediate compliance mandates for private healthcare AI, it signals Texas's regulatory direction. Healthcare AI vendors operating in Texas should monitor the Advisory Council's recommendations for emerging state AI requirements.

Compliance Checklist

Texas Healthcare AI Compliance — Key Requirements

TMRPA Authorization Documentation
AI systems in Texas must document authorization for medical records disclosures that are not covered by TMRPA's treatment, payment, and operations exceptions. Unlike HIPAA, TMRPA applies to all medical records — not just electronic records. AI workflows that involve paper record digitization or faxed records must comply with TMRPA.

Texas AG Healthcare Enforcement Monitoring
The Texas AG has enforcement authority over TMRPA. Monitor Texas AG healthcare enforcement announcements. Texas has been active in state-level healthcare privacy enforcement, including investigations of telehealth platforms and health data brokers.

TMB Telemedicine Compliance for AI
AI-assisted telemedicine in Texas must comply with TMB's telemedicine rules at 22 Texas Admin. Code Chapter 190. AI cannot establish a patient-physician relationship autonomously; the AI can support but not replace the physician-patient encounter required for telemedicine prescribing.

Texas Health Data Sharing Agreements
Texas has state-specific requirements for health information exchange and data sharing. Practices participating in the Texas Health Services Authority (THSA) or Texas HIE must ensure AI integrations comply with THSA data sharing terms in addition to HIPAA BAAs.

STAR+PLUS Medicaid Compliance
Texas Medicaid managed care includes STAR, STAR+PLUS, STAR Kids, and CHIP programs administered by MCOs. AI billing for Texas Medicaid must be configured for each program's specific billing requirements, prior auth requirements, and quality reporting mandates.

Texas Surprise Billing Law
Texas SB 1004 (2019) and federal No Surprises Act requirements apply to Texas healthcare providers. AI billing systems must implement surprise billing disclosure and estimation requirements for scheduled services, including AI-generated cost estimates.

Frequently Asked Questions

How does Texas TMRPA differ from HIPAA?

Texas TMRPA at Health and Safety Code Chapter 181 differs from HIPAA in key ways: (1) TMRPA applies to all medical records — not just electronic records as HIPAA primarily addresses; (2) TMRPA applies to entities that maintain patient's medical records for purposes of providing healthcare — potentially broader than HIPAA's covered entity definition; (3) TMRPA creates a private right of action for actual damages plus attorney fees; (4) TMRPA's consent requirements for certain disclosures may differ from HIPAA. Texas healthcare AI must comply with whichever standard is more protective.

What is Texas HB 4 and does it affect healthcare AI?

Texas HB 4 (2023, Responsible AI Governance Act) created the Texas Artificial Intelligence Advisory Council to study AI use in Texas government and regulated industries. While HB 4 does not yet create direct compliance mandates for private healthcare AI, the Advisory Council is studying AI use in healthcare and may recommend specific regulations. Healthcare AI vendors in Texas should monitor Advisory Council reports and any resulting legislation.

What are the TMB rules on AI-assisted prescribing?

The Texas Medical Board's rules on telemedicine (22 Texas Admin. Code §§190.8, 190.9) require that prescribing via telemedicine involve a real-time patient-physician interaction and physician clinical judgment. AI cannot autonomously generate or authorize prescriptions — AI prescription assistance tools must operate under direct physician supervision with physician review and e-signature of every prescription. Texas's prescribing rules are among the more restrictive telemedicine prescribing standards nationally.

Does Texas have AI regulations for healthcare?

As of 2025, Texas does not have healthcare-specific AI regulations beyond the HB 4 advisory framework. However, Texas applies existing TMRPA, TMB telemedicine rules, and state Medicaid requirements to AI systems in healthcare. The Texas Department of State Health Services (DSHS) and Texas Health and Human Services Commission (HHSC) both have regulatory authority over aspects of healthcare delivery that may increasingly address AI. Monitor Texas legislative sessions (biennial) for emerging healthcare AI requirements.

What Texas-specific compliance should healthcare AI vendors know?

Key Texas-specific compliance for healthcare AI: (1) TMRPA authorization requirements for all medical record disclosures; (2) TMB telemedicine rules for AI-assisted clinical care; (3) Texas STAR/STAR+PLUS Medicaid program-specific billing requirements; (4) Texas Surprise Billing (SB 1004) disclosure requirements; (5) Texas data breach notification requirements (Texas Business and Commerce Code Chapter 521) — 60-day notification for breaches of sensitive personal information including medical records; (6) Texas Health Information Exchange regulations for practices participating in Texas HIE.

Texas-Ready Healthcare AI with TMRPA and TMB Compliance

Claire's Texas deployment includes TMRPA-aligned authorization documentation, TMB telemedicine rule compliance, and Texas Medicaid program configuration — purpose-built for the Texas regulatory environment.

Book a Demo See How It Works