The Texas Audit Privilege Act, codified at Chapter 1101 of the Texas Health and Safety Code, gives a facility two things when it voluntarily reviews its own environmental or health and safety compliance: an evidentiary privilege that keeps the audit report out of civil and administrative proceedings, and immunity from state penalties for violations the facility discloses and corrects. Enacted in 1995, the statute is built on the premise that companies will find and fix more problems on their own than inspectors will catch, so long as self-reporting does not become self-incrimination. The protections are real, but they are conditional, and a facility that skips a step can lose both of them.
What Counts as a Voluntary Audit
The act reaches audits a facility starts on its own initiative. An audit ordered by a court, imposed by an administrative decree, or required as a permit condition does not qualify. A regulator-triggered inspection is not a voluntary audit. The company has to be the one choosing when to look and how deep to go.
There is one carve-out that matters in deal work. A prospective buyer can begin an environmental audit of a target facility before an acquisition closes and continue it afterward without losing eligibility for the act’s protections.1Texas Public Law. Texas Health and Safety Code Section 1101.154 – Notice Requirement Due-diligence audits are standard in industrial transactions, and the statute makes sure a buyer is not punished for finding what the seller left behind.
What the Audit Report Includes
Section 1101.051 defines the “audit report” broadly. The privilege attaches to the final written report and to the documents and communications generated during the audit.2State of Texas. Texas Health and Safety Code Section 1101.051 – Audit Report That includes:
- The auditor’s scope descriptions, findings, conclusions, recommendations, exhibits, and appendices.
- Internal memoranda and analyses discussing the findings or how to implement them.
- Implementation plans and tracking systems designed to correct past noncompliance or prevent future violations.
- Supporting materials: employee interviews, field notes, photographs, laboratory analyses, legal analyses, maps, charts, and electronically recorded information.
Documents in the audit file should be labeled “COMPLIANCE REPORT: PRIVILEGED DOCUMENT” or something similar. Failure to label does not automatically waive the privilege, but labeling makes the privilege far easier to assert if someone later tries to compel disclosure.2State of Texas. Texas Health and Safety Code Section 1101.051 – Audit Report Materials that existed before the audit started, and records a facility is independently required to maintain or report, do not become part of the audit report just because someone reviewed them during the review.
The Two Protections
Evidentiary Privilege
An audit report that meets the statutory requirements cannot be introduced as evidence in a civil or administrative proceeding. Opposing parties in litigation cannot pull it through discovery, and regulators cannot use it to build an enforcement case.3Texas Commission on Environmental Quality. A Guide to the Texas Environmental, Health, and Safety Audit Privilege Act The point is to let employees and consultants speak candidly without having their words turned into proof of liability.
The privilege does not cover the underlying facts of a violation. If wastewater discharge exceeded permitted levels, that fact exists independently of the audit and remains discoverable through monitoring data, sampling records, or testimony. The report describing the exceedance is shielded. The exceedance itself is not. Facilities that blur those two concepts tend to overestimate what the act does for them.
Immunity From State Penalties
The second layer is administrative immunity. When a facility discovers a violation through a voluntary audit and discloses it to the Texas Commission on Environmental Quality, the state is barred from imposing penalties for it. The exposure the immunity cuts off is substantial: civil and administrative penalties for environmental violations within TCEQ’s jurisdiction can reach $25,000 per day per violation.4Texas Comptroller of Public Accounts. Revenue Object 3594 – Waste Disposal Violations
Immunity is not amnesty. The facility still has to achieve full compliance within a reasonable timeframe. If a company reports a violation and then drags its feet on the fix, TCEQ can revoke the immunity and pursue enforcement.3Texas Commission on Environmental Quality. A Guide to the Texas Environmental, Health, and Safety Audit Privilege Act
Filing the Notice of Audit
Before the audit begins, the facility must send a Notice of Audit to TCEQ. The notice has to identify the facility or portion of the facility being audited, state the anticipated start date, and describe the general scope.1Texas Public Law. Texas Health and Safety Code Section 1101.154 – Notice Requirement A single notice can cover multiple audits planned around the same time.
The statute does not fix a mandatory number of days of advance notice, but it does require that the notice precede the audit. The safe practice is to send it well before the start date, by certified mail, to the TCEQ Office of Compliance and Enforcement.3Texas Commission on Environmental Quality. A Guide to the Texas Environmental, Health, and Safety Audit Privilege Act If the first day of auditing predates the postmark on the notice, the timing problem alone can unravel the protection. The audit itself should also stay inside the scope the notice described; if the scope expands, send an updated notice.
Disclosing a Violation
When the audit turns up noncompliance, the facility prepares a Disclosure of Violation and sends it to TCEQ. The disclosure must include the facility’s name and address, the time and date of the violation, a description of the noncompliance, the specific legal requirement that was not met, and the measures taken or planned to correct it.5Texas Commission on Environmental Quality. Guidance on the Texas Environmental, Health, and Safety Audit Privilege Act Detail matters. Vague references to “environmental regulations” will not do the job.
Like the Notice of Audit, the Disclosure of Violation goes to the TCEQ Office of Compliance and Enforcement by certified mail.3Texas Commission on Environmental Quality. A Guide to the Texas Environmental, Health, and Safety Audit Privilege Act TCEQ publishes model templates for both filings in its guidance, and it issues a confirmation letter when it receives yours. Hold on to copies of everything sent and every confirmation received.
Where the Protections Stop
Several categories fall outside the act, and in each the privilege and the immunity disappear together.
- Criminal conduct. If the violation involves criminal activity, the audit report is not privileged and the information can be used in a prosecution.3Texas Commission on Environmental Quality. A Guide to the Texas Environmental, Health, and Safety Audit Privilege Act
- Bad faith. An audit designed to paper over violations the company already knew about, rather than to find and fix problems, loses its protected status.
- Serious threats to public health or the environment. Violations that create a substantial danger fall outside the immunity.
- Separately required reporting. Data that other laws already require you to submit, such as emission monitoring results and discharge reports, cannot be hidden behind the audit privilege and must still be filed on their normal schedule.
- Failure to correct. Disclosing a violation without fixing it in a reasonable time lets the state revoke immunity and move to enforcement.
The bad-faith question is where most enforcement disputes land. TCEQ and the courts look at the totality of the circumstances: Was management already aware of the problem before the audit started? Did the audit look designed to generate a paper trail of “discovery” for something that was no mystery internally? If so, the protections evaporate.
Federal Enforcement Is Not Covered
This is the point that catches facilities off guard. The Texas Audit Privilege Act is a state statute, and it does not stop the federal EPA from acting. The EPA has taken the position that state audit privilege and immunity laws must still satisfy the minimum requirements for federally authorized environmental programs.6US EPA. State Audit Privilege and Immunity Laws and Self-Disclosure Laws and Policies When a violation also implicates a federal statute such as the Clean Air Act or the Clean Water Act, the EPA keeps independent authority to enforce no matter what Texas does.
The EPA runs its own voluntary disclosure program, the Audit Policy, which offers up to a 100 percent reduction of gravity-based civil penalties when a facility meets all nine conditions. Those conditions include discovering the violation through a systematic audit, disclosing it to the EPA within 21 calendar days, and correcting the problem within 60 days of discovery.7US EPA. EPA’s Audit Policy Even under the federal policy, the EPA retains the right to collect any economic benefit the company gained from the period of noncompliance. Federal disclosures go through the EPA’s eDisclosure portal, which is a separate system from any filing a facility makes with TCEQ.8US EPA. EPA’s eDisclosure A facility operating under both state and federal permits should treat the Texas and EPA disclosure processes as parallel tracks, not substitutes.