A data breach at your firm triggers three separate clocks: Texas Chapter 521, TDRPC 1.05 ethics duties, and possibly HIPAA. Here's what triggers notification, the current timelines (including a 2023 change many sources still get wrong), and when to bring in outside breach counsel.