What is invasion of privacy
A person can lose control of their medical records, their image, or their private communications without knowing it happened. A job offer disappears. A relationship ends. An intimate photo circulates without consent. Invasion of privacy is the legal claim that addresses these violations. Invasion of privacy is a recognized tort under Texas common law that covers unauthorized intrusion into personal spaces, unwanted public disclosure of private information, false public portrayals, and commercial misuse of a person's identity without consent. Texas courts have enforced privacy claims under the framework adopted in Industrial Foundation of the South v. Texas Industrial Accident Board, 540 S.W.2d 668 (Tex. 1976). Texas law provides both civil remedies and criminal penalties for those who commit these violations.
What is Invasion of Privacy?
Most people assume a privacy violation only occurs when someone physically enters a home or reads a letter. The legal definition covers far more. Invasion of privacy is interference with a person's right to keep personal matters, private spaces, and personal data free from unauthorized access, public exposure, or commercial use without consent. The right applies to individuals, personal data, and private physical spaces, and is protected under Texas common law as a tort claim with 4 recognized categories.
Texas courts apply the standard from the Restatement (Second) of Torts. The conduct must go beyond ordinary curiosity or accidental disclosure. It must be the kind a reasonable person of ordinary sensibilities would find highly offensive. An attorney will evaluate the facts of the intrusion, the relationship between the parties, and the actual harm caused before identifying which of the 4 categories applies.
What Does Invasion of Privacy Mean?
A privacy violation and a personal embarrassment are not the same legal event. Invasion of privacy means a person or organization deliberately crossed a recognized legal boundary between public conduct and private life, causing real harm to the person whose privacy was violated.
Texas courts apply the reasonable person test. The test asks whether an average person would find the conduct seriously offensive rather than merely unwanted. In Cornhill Insurance PLC v. Valsamis, Inc., 106 F.3d 80 (5th Cir. 1997), applying Texas law, the Fifth Circuit confirmed that a valid invasion of privacy claim requires conduct that exceeds acceptable social norms and produces measurable harm to the plaintiff's personal life or reputation. Hurt feelings alone do not establish a legal claim.
Why is Privacy Important Legally?
Private medical records could be freely shared, a person's face could appear in advertising without consent, and private communications could be published without penalty without legal protection. Texas privacy law addresses those harms because they produce real financial and emotional consequences. Privacy protections serve 3 core legal purposes under Texas law.
First, they protect personal autonomy by giving individuals control over information others may know, share, or use. Second, they prevent financial injury from unauthorized commercial use of a person's name, voice, or likeness. Third, they guard against reputational and emotional damage caused by false public portrayals or the exposure of sensitive private facts. Texas Civil Practice and Remedies Code Section 16.003 sets a 2 year statute of limitations for these claims, measured from the date the violation occurred or was reasonably discovered.
What is Considered Invasion of Privacy?
A neighbor who asks intrusive questions, a coworker who gossips, or a stranger who stares in public does not meet the legal threshold for invasion of privacy. The element that separates an annoying act from a legally actionable one is the reasonable expectation of privacy.
Actions considered invasion of privacy under Texas law include unauthorized surveillance of a person in a private space, hacking personal accounts or devices, publishing intimate images without consent, using a person's name or image for commercial purposes without written permission, publicly disclosing medical or financial records, and portraying someone falsely in a published work. The plaintiff must have held a genuine and objectively reasonable belief that the information or space was private. Texas courts apply the highly offensive conduct test alongside the reasonable expectation test, examining whether a reasonable person would find the defendant's actions seriously objectionable, as confirmed in Diamond Shamrock Refining and Marketing Co. v. Mendez, 844 S.W.2d 198 (Tex. 1992). An attorney will measure the specific conduct against both standards before advising a client on the strength of a claim.
Is Invasion of Privacy a Crime?
A single act of privacy invasion can trigger both civil liability and criminal prosecution. Invasion of privacy is a criminal offense under specific provisions of Texas law.
Texas Penal Code Section 21.15 criminalizes invasive visual recording. The statute covers photographing or recording a person in a private space such as a bathroom, dressing room, or bedroom without consent, and publishing or transmitting those images. Texas Penal Code Section 21.16 makes it a crime to disclose intimate visual material without consent. The offense is classified as a Class A misdemeanor or state jail felony depending on the circumstances. Texas Penal Code Section 16.02 prohibits the unlawful interception of electronic communications. A person convicted under these statutes faces jail time, fines, and a permanent criminal record. Civil claims for damages proceed independently of criminal prosecution, and a victim may pursue both remedies at the same time.
Is Invasion of Privacy Illegal?
Recording a conversation in Texas is lawful if at least 1 party to the conversation consents, under the one party consent rule in Texas Penal Code Section 16.02. Recording without any party's consent is illegal. Photographing a person in a public space is generally lawful in Texas. Photographing the same person in a bathroom, changing room, or private residence without permission violates Section 21.15 regardless of whether the image is ever published. Disclosing a private person's medical records, financial details, or intimate images without consent is illegal under both Texas criminal law and civil tort law. Legality turns on 3 factors. The first factor is where the conduct occurred. The second factor is whether the person held a reasonable expectation of privacy. The third factor is whether the purpose serves a recognized public interest or is carried out for harm or profit.
What are the Four Types of Invasion of Privacy?
Many people treat invasion of privacy as a single legal claim. Texas courts treat it as 4 separate torts, each with its own elements, defenses, and damages. The Texas Supreme Court recognized all 4 categories in Cain v. Hearst Corp., 878 S.W.2d 577 (Tex. 1994). A single incident can involve more than 1 category at the same time.
The 4 recognized types of invasion of privacy are intrusion upon seclusion, false light, public disclosure of private facts, and appropriation of name or likeness.
1. Intrusion Upon Seclusion
A person who installs spyware on a spouse's phone, places a hidden camera in a rental property bathroom, or covertly records a therapy session has committed the same fundamental wrong, even though the method differs each time. Intrusion upon seclusion occurs when a person intentionally intrudes, physically or by other means, into a space or matter where another person holds a reasonable expectation of privacy, and the intrusion would be highly offensive to a reasonable person.
Physical entry is not required to satisfy the intrusion element. Electronic surveillance, unauthorized access to private accounts, and covert recording all qualify. Texas courts require proof of 3 elements. The first element is intentional intrusion by the defendant. The second element is that the intrusion involved a private matter or protected space. The third element is that the conduct was highly offensive by an objective reasonable person standard. In Clayton v. Richards, 47 S.W.3d 555 (Tex. App. Texarkana 2001, pet. denied), a Texas Court of Appeals confirmed that an employer's covert video surveillance of an employee in a private area satisfied all 3 elements.
An attorney pursuing an intrusion claim will obtain digital forensic records, device access logs, platform data, and witness statements to document both the act and the intent behind it. Legal defenses include consent, absence of a reasonable expectation of privacy in the specific location, or that the conduct was not highly offensive by an objective standard. A claim must be filed within 2 years under Texas Civil Practice and Remedies Code Section 16.003.
2. False Light
Publishing a photo of a crime victim alongside a story about a convicted offender, without identifying which person is which, places an innocent person in a false light before a public audience. False light is a privacy tort that arises when a defendant publicly portrays a person in a false or misleading way a reasonable person would find highly offensive, and the defendant acted with knowledge of the falsity or with reckless disregard for the truth.
False light and defamation are not the same claim. Defamation centers on reputational damage from a false statement of fact. False light centers on the offensiveness of the false portrayal, regardless of whether it technically damaged reputation. The Texas Supreme Court significantly limited false light claims in Cain v. Hearst Corp., 878 S.W.2d 577 (Tex. 1994), holding that Texas does not recognize a standalone false light claim where it would duplicate a defamation action. Plaintiffs in Texas whose harm arises from false public portrayals typically pursue defamation instead. An attorney will assess whether the false portrayal contains actionable statements of fact and determine which cause of action better fits the client's documented harm.
3. Public Disclosure of Private Facts
A person who recovered from addiction, manages a chronic illness, or carries debt from a past financial hardship has not forfeited the right to keep those facts private. Public disclosure of private facts occurs when a defendant publicly discloses genuinely private information about a person, the disclosed information would be highly offensive to a reasonable person, and the information does not serve a legitimate public concern.
The disclosure must reach a broad audience, not merely 1 or 2 people. Sharing a private person's HIV status, past bankruptcy, or sexual history on social media without consent can satisfy this tort. Texas courts apply a newsworthiness test to determine whether the disclosed information serves a legitimate public purpose. A private person's medical history, family conflicts, or financial struggles generally do not qualify as newsworthy. An attorney will present evidence showing the private nature of the information, the breadth of the publication, and the documented harm the plaintiff suffered as a direct result.
4. Appropriation of Name or Likeness
A business that places a local resident's photograph on a billboard to promote its services without written permission has taken something of commercial value without consent or payment. Appropriation of likeness occurs when a person or entity uses another person's name, image, voice, or identity for commercial benefit without that person's consent.
Texas Business and Commerce Code Sections 26.001 through 26.015 govern the right of publicity in Texas. The statute protects both living individuals and deceased persons from unauthorized commercial exploitation of their identity. An attorney pursuing an appropriation claim will document the unauthorized use, identify the commercial benefit the defendant received, and calculate damages based on the fair market value of the person's name or image. Written consent is an absolute defense to this claim under Texas law.
What are Examples of Invasion of Privacy?
Invasion of privacy examples in Texas include hacking accounts, publishing private photos, recording without consent, and unauthorized commercial use of a person's identity.
- Hacking Personal Accounts: A person who accesses another person's email, social media, or financial accounts without authorization commits intrusion upon seclusion under Texas common law.
- Publishing Intimate Images: A former partner who posts sexually explicit photographs online without the subject's consent violates Texas Penal Code Section 21.16 and the public disclosure tort.
- Recording Without Consent: A landlord who installs a hidden camera in a tenant's bedroom without consent violates Texas Penal Code Section 21.15 and the intrusion upon seclusion tort.
- Unauthorized Commercial Use of Identity: A business that uses a private person's photo in advertising without written permission violates Texas Business and Commerce Code Section 26.001 and the appropriation of likeness tort.
- Disclosing Private Medical Records: An employer who shares an employee's medical diagnosis with coworkers without authorization violates Texas Health and Safety Code Chapter 181 and the public disclosure tort.
Can Taking Someone's Photo be an Invasion of Privacy?
The answer depends on 3 variables. The first is where the photo is taken. The second is what is shown in it. The third is how it is used after it is taken.
Taking a photo of someone on a public street in Texas is generally lawful because no reasonable expectation of privacy exists in a fully public space. Taking a photo of the same person in a bathroom, dressing room, locker room, or private residence without consent violates Texas Penal Code Section 21.15, regardless of whether the image is ever published. Using a private person's photo in a commercial advertisement without written consent violates the right of publicity under Texas Business and Commerce Code Section 26.001. Publishing a photo taken lawfully in public but pairing it with false or misleading information may give rise to a false light or defamation claim. Location, content, and use each carry independent legal weight.
Can Social Media Posts Violate Privacy?
Social media platforms treat published posts as public by default, but that default does not override the legal rights of the people depicted or discussed. Social media posts violate privacy when they publicly disclose private facts about a person, share intimate images without the subject's consent, or use another person's likeness to promote a product without permission.
Texas Penal Code Section 21.16 targets the nonconsensual disclosure of intimate visual material on digital platforms and classifies the offense as a Class A misdemeanor or state jail felony. A person who shares a private individual's home address, mental health diagnosis, or private communications through a social media post without consent may face civil liability for public disclosure of private facts. An attorney will document the post, identify the size of the audience reached, and assess whether the harm supports a claim for emotional distress, reputational injury, or economic loss.
Are Breach of Confidentiality Examples of Invasion of Privacy?
A physician who emails a patient's cancer diagnosis to the patient's employer, a therapist who discusses a client's mental health history at a public event, and a bank employee who shares a customer's account information with a third party have each committed a breach of confidentiality that also constitutes invasion of privacy. These violations overlap when the professional relationship created a reasonable expectation that information would remain protected, and the unauthorized disclosure caused measurable harm.
Texas Health and Safety Code Chapter 181, the Texas Medical Privacy Act, prohibits covered entities from disclosing protected health information without patient authorization. A breach of that statute supports both a regulatory complaint and a civil tort claim for public disclosure of private facts. An attorney pursuing both theories will document the professional relationship, the specific disclosure, and the harm caused to show that the defendant violated both a statutory duty and a common law right in the same act.
What Must Be Proven in an Invasion of Privacy Case?
A Texas invasion of privacy plaintiff must prove 4 core elements involving intrusion, intent, lack of consent, and measurable harm supported by evidence.
- Recognized Intrusion: The defendant must have committed 1 of the 4 forms of privacy invasion recognized under Texas common law, including intrusion upon seclusion or appropriation of likeness.
- Intent or Reckless Disregard: The defendant's conduct must have been intentional or carried out with reckless disregard for the plaintiff's privacy rights under the applicable tort standard.
- Reasonable Expectation of Privacy: The plaintiff must have held a genuine and objectively supportable expectation of privacy in the information, space, or identity the defendant accessed or disclosed.
- Actual Harm: The plaintiff must have suffered measurable harm a court can identify, including emotional distress, financial loss, or reputational damage directly caused by the defendant's conduct.
A claim may be dismissed when any 1 of the 4 elements is not supported by evidence, regardless of how offensive the defendant's conduct appeared.
How Do Courts Determine Privacy Violations?
A plaintiff who testifies they felt violated does not meet the legal threshold on its own. Texas courts apply 2 objective standards to evaluate privacy claims.
The first standard is the reasonable expectation of privacy test, which asks whether the plaintiff genuinely believed the information or space was private and whether that belief was objectively reasonable given the circumstances. The second standard is the highly offensive conduct test, which asks whether a reasonable person of ordinary sensibilities would find the defendant's behavior seriously objectionable, not merely inconvenient. In Valenzuela v. Aquino, 853 S.W.2d 512 (Tex. 1993), the Texas Supreme Court confirmed that courts must evaluate the totality of circumstances including the parties' relationship, the nature of the information, the scope of any disclosure, and the defendant's intent. Both standards must be satisfied for a claim to move forward.
How to Prove Invasion of Privacy?
An attorney handling a Texas invasion of privacy claim will collect 6 categories of evidence to build a provable case.
The first category is digital records, including screenshots, metadata, server access logs, and platform records documenting the unauthorized act. The second category is device forensic data showing when and how private information was accessed or transmitted. The third category is witness statements from people who observed the intrusion or its effects. The fourth category is medical or psychological records documenting emotional distress, anxiety, or trauma caused by the violation. The fifth category is financial records showing lost income, identity theft losses, or costs incurred to address the harm. The sixth category is communications between the defendant and third parties showing awareness of the private nature of the information before disclosure. Each piece of evidence must connect to a specific element of the applicable tort.
Do All Privacy Violations Require Damages?
Texas courts generally require evidence of actual injury before awarding damages in law for a privacy tort claim, but not every claim requires proof of a specific dollar amount before liability is established. Nominal damages are available in limited circumstances where a violation is proven but losses are difficult to quantify.
Statutory claims under Texas Penal Code Section 21.15 and Section 21.16 allow courts to presume certain harms, including emotional distress, without requiring the plaintiff to produce medical records for every symptom described. Common law privacy torts require the plaintiff to demonstrate measurable harm such as emotional distress, reputational damage, financial loss, or physical consequences from the violation. The actual malice standard applies to claims involving public figures and requires a higher threshold of proof before damages are available. Courts assess the nature of the violation, the scope of the disclosure, and the documented effects on the plaintiff's life when determining the amount of compensation owed.
What Happens if Someone Commits Invasion of Privacy?
Civil liability and criminal prosecution are 2 independent legal consequences that can both follow from the same act of privacy invasion in Texas. A victim may file a civil lawsuit in Texas district court seeking monetary compensation, a court order stopping the ongoing violation, and in cases of malicious conduct, punitive damages. A defendant convicted under Texas Penal Code Section 21.15 or Section 21.16 faces jail time, fines, and a permanent criminal record alongside any civil judgment. A civil judgment is enforceable even when the criminal case ends in an acquittal or is never prosecuted. A personal injury attorney will assess the facts and identify which remedies produce the strongest outcome for the victim's recovery.
What are the Possible Consequences of Invasion of Privacy?
Committing invasion of privacy in Texas produces 5 categories of legal consequences.
- Civil liability for compensatory damages covering emotional distress, psychological treatment, lost wages, and economic losses directly caused by the violation.
- Punitive damages under Texas Civil Practice and Remedies Code Chapter 41, available when the defendant acted with actual malice, fraud, or gross negligence.
- Criminal conviction and sentencing under Texas Penal Code Section 21.15 or Section 21.16 for invasive recording or nonconsensual image disclosure.
- Injunctive relief from a Texas district court requiring the defendant to stop the violating conduct and remove published content.
- Professional and reputational consequences including loss of employment, professional licensing actions, and permanent damage to business relationships.
What Damages Can Be Awarded in Invasion of Privacy Cases?
Texas courts award damages in invasion of privacy cases across 3 recognized categories, each tied to a different type of documented harm.
- Compensatory damages cover the plaintiff's actual measured losses. Compensatory damages include psychological treatment costs, lost income from reputational harm, the fair market value of unauthorized commercial use of the plaintiff's identity, and out of pocket expenses for account recovery or identity theft remediation.
- Emotional distress damages compensate for mental anguish, humiliation, shame, chronic anxiety, and post traumatic symptoms. To recover emotional distress damages, Texas courts require credible supporting evidence, typically medical or psychological records, before awarding emotional distress compensation.
- Punitive damages are available under Texas Civil Practice and Remedies Code Section 41.003 when the defendant acted with actual malice, fraud, or gross negligence. Texas caps punitive damages under Section 41.008. The cap equals 2 times economic damages plus up to $750,000 in non economic damages, or $200,000, whichever is greater. Courts weigh the defendant's intent, the severity of the conduct, and the scale of harm when calculating punitive damages the plaintiff is entitled to recover.
Can Businesses Be Sued for Privacy Violations?
Texas courts hold businesses accountable for invasion of privacy when their employees, systems, or policies result in unauthorized disclosure or misuse of personal information. A business may be sued for using a customer's photo in advertising without consent, disclosing employee medical records without authorization, failing to secure customer data in a preventable breach, or conducting surveillance of employees in private areas without legal justification. Texas Business and Commerce Code Chapter 521 requires businesses to protect sensitive personal information and mandates breach notification to affected individuals and the Texas Attorney General. Civil claims and regulatory penalties run simultaneously, and a business found liable may face damages from individual plaintiffs alongside state enforcement action.
Are there Penalties for Data Breaches?
Texas imposes civil penalties on businesses that fail to notify affected individuals and the Texas Attorney General of a data breach under Texas Business and Commerce Code Section 521.053. The penalty reaches $100 per individual affected per day, capped at $250,000 per breach incident. Federal law adds separate penalties for businesses handling protected health information under the Health Insurance Portability and Accountability Act, with civil penalties reaching $1.9 million per violation category per calendar year under the 2013 Omnibus Rule. Affected individuals may pursue civil claims for identity theft losses, credit monitoring costs, emotional distress, and financial harm caused by the breach, separate from any government enforcement action.
What Should I Do if My Privacy is Violated?
Acting quickly after a privacy violation reduces further harm and preserves legal options within the 2 year filing deadline under Texas Civil Practice and Remedies Code Section 16.003. Take these 5 steps immediately after discovering a privacy violation.
- Document all available evidence right away, including screenshots, links to published content, email records, text messages, and account activity logs showing unauthorized access.
- Secure all personal accounts by changing passwords, enabling two factor authentication, and removing access for unrecognized third party applications.
- Report criminal conduct such as invasive recording or nonconsensual image sharing to local law enforcement or the Texas Attorney General's Consumer Protection Division.
- Submit a removal request to any platform, website, or business that published private content, citing applicable Texas law and the platform's own terms of service.
- Contact a personal injury attorney before attempting to resolve the matter directly with the defendant, particularly when the violation caused financial loss, emotional harm, or reputational damage.
What are the Effects of Invasion of Privacy?
Texas courts recognize 4 categories of documented effects in privacy cases.
- Psychological and emotional harm includes anxiety disorders, depression, post traumatic stress, shame, and difficulty trusting others. These conditions often require ongoing treatment and produce direct medical costs that courts factor into damages calculations.
- Reputational harm results when private information reaches an audience that changes how colleagues, employers, family members, or community members perceive the victim. Lost job opportunities, severed professional relationships, and lasting damage to personal standing in the community are recognized forms of reputational injury in Texas civil cases.
- Financial harm includes identity theft losses, unauthorized transactions, lost employment income, credit damage, and the economic value of any unauthorized commercial use of the plaintiff's identity.
- Physical harm can occur in cases involving stalking, harassment, or location tracking where invasive conduct escalates to direct personal danger. Texas courts have addressed this intersection in cases where invasive recording or covert surveillance led to threats or physical confrontation against the victim.
When Should I Consult a Lawyer for Privacy Issues?
Consult a lawyer immediately after discovering that private information was publicly disclosed without consent, a name or image was used commercially without permission, a recording was made in a private space without authorization, or a business exposed personal data through a preventable breach. Privacy violations rarely stop without legal intervention, and delay allows harm to accumulate while evidence disappears.
Texas Civil Practice and Remedies Code Section 16.003 gives a plaintiff 2 years from the date of discovery to file a privacy tort claim. An attorney will identify which of the 4 recognized privacy torts applies, gather evidence to support every element of the claim, assess the full scope of damages, and advise whether criminal reporting, civil litigation, or both remedies serve the client's interests.
Can a Personal Injury Attorney Handle Invasion of Privacy Cases?
Invasion of privacy cases involve intentional torts that cause physical, emotional, and financial harm, placing them within the scope of Texas personal injury law. A personal injury attorney in Texas handles invasion of privacy claims under all 4 recognized categories, including cases involving nonconsensual image disclosure, unauthorized commercial use of identity, and data breaches that caused measurable individual harm.
An attorney pursuing a privacy case analyzes the facts against the elements of the applicable tort, builds a damages record showing the full extent of the plaintiff's losses across emotional, financial, reputational, and physical harm categories, and determines whether claims under Texas tort law and Texas Business and Commerce Code Chapter 521 apply at the same time. Where documented harm resulted from the violation, an attorney will pursue fair compensation for all losses through every available legal theory.