28 Tex. Admin. Code § 22.26
Use of Version 1, 2, or 3 of the model privacy form in 74 Federal Register 62890 (December 1, 2009), or Version 4 for the optional mail-in opt out form, consistent with the instructions in § 22.27 of this title (relating to General Instructions), complies with the notice content requirements of § 22.10 and § 22.11 of this title (relating to Information to be Included in Privacy Notices and Form of Opt Out Notice to Consumers and Opt Out Methods), although use of the model privacy form is not required. The examples are not exclusive. Compliance with an example, to the extent applicable, constitutes compliance. Covered entities, including a group of financial holding company affiliates that use a common privacy notice, may use the model privacy form, if the information in the model privacy form is accurate for each institution that uses the notice. Note that disclosure of certain information, such as assets, income, and information from a consumer reporting agency, may give rise to obligations under the federal FCRA, such as a requirement to permit a consumer to opt out of disclosures to affiliates or designation as a consumer reporting agency if a covered entity makes disclosures to nonaffiliated third parties.
28 Tex. Admin. Code § 22.26