Privacy and Security Policy

The Texas Department of State Health Services (DSHS) maintains this site as a public service. This policy describes DSHS' privacy and security practices regarding information collected from visitors to the site, including what information is collected and how that information is used. Except for authorized law enforcement investigations, no other attempts are made to identify individual users or their usage habits. This information will not be sold to a third party. This information will not be shared with a third-party unless required by law or as stated in this policy. All information collected from the DSHS Web site, including the summary server log information, e-mails sent to the Web site, and information collected from Web-based forms, is subject to the Texas Public Information Act. This policy applies to all pages ending in

Server Logs/Log Analysis Tools

For site management functions, information is collected for analysis and statistical purposes. We use Log analysis tools to create summary statistics, which are used for purposes such as assessing what information is of most interest, determining technical design specifications, and identifying system performance or problem areas. Raw data logs are used for no other purposes. The following information is collected for this analysis:

  • User Client hostname – The hostname (or Internet Protocol (IP) address if DNS is disabled) of the user/client requesting access.
  • HTTP header, "user-agent" – The user-agent information includes the type of browser, its version, and the operating system it's running on.
  • HTTP header, "referrer" – The referrer specifies the page from which the client accessed the current page.
  • System date – The date and time of the user/client request.
  • Full request – The exact request the user/client made.
  • Status – The status code the server returned to the user/client.
  • Content length – The content length, in bytes, of the document sent to the user/client.
  • Method – The request method used.
  • Universal Resource Identifier (URI) – The location of a resource on the server.
  • Query string of the URI – Anything after the question mark in a URI.
  • Protocol – The transport protocol and version used.

For site security purposes and to ensure that the site remains available to all users, the Department uses software to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. Unauthorized attempts to upload information or change information on this site are strictly prohibited and may be punishable under applicable state and federal laws.


Cookies may be used to collect information about the number and types of visitors to the DSHS website. This information is not reported or used in any manner that would reveal personally identifiable information, but rather it is used by DSHS to facilitate the display of information to the web user.


If you send us an electronic mail message with a question or comment that contains personally identifying information, or fill out a form that e-mails us this information, DSHS will only use the personally-identifiable information to respond to your request and analyze trends. We may also redirect your message to another government agency or person who is in a better position to answer your question.

Web-Based Forms

Any forms submitted via the website containing personally identifiable information will be sent via secured transmission. Personally identifiable information collected from these forms has a specified use (e.g. registration, survey response, order, etc.) and the information is used by DSHS only for that purpose. Each form contains a link to this privacy policy.

You have the right to request and be informed about information that DSHS collects about you. You are entitled to receive and review the information upon request. You also have the right to ask DSHS to correct any information that is determined to be incorrect.

Last updated February 10, 2017