Regulations › US states › Tennessee

TIPA

Tennessee Information Protection Act

In force privacy consumer rights
WhenIn effect since 1 July 2025
Who enforces itState Attorney General
Who it applies toBusinesses that process personal data of the state's residents above the law's thresholds. Thresholds, exemptions and sensitive-data rules differ by state.

Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →

Who it covers

Thresholds
0
Over $25 million revenue and either 175,000 consumers, or 25,000 consumers plus over 50% of gross revenue from sales.Tenn. Code Ann. § 47-18-3202 · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Exemptions
0
Entity-level exemptions for GLBA financial institutions, insurers, HIPAA covered entities and business associates, nonprofits and higher education.Tenn. Code Ann. § 47-18-3210(a) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.

Sensitive data and minors

Sensitive data
1
Opt-in consent to process sensitive data (standard categories plus known child and precise geolocation).Tenn. Code Ann. §§ 47-18-3201(26), 47-18-3204(a)(6) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Children and teens
1
Child means under 13; known child data is sensitive and processed per COPPA. No teen protections.Tenn. Code Ann. § 47-18-3201(5) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Data minimization
1
Collection adequate, relevant and reasonably necessary for disclosed purposes.Tenn. Code Ann. § 47-18-3204(a)(1) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.

Consumers' rights

Rights
2
Access, correct, delete, portability, opt out of sale, targeted ads and profiling (7 rights).Tenn. Code Ann. § 47-18-3203(a)(2) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Request deadline
2
45 days, extendable once by 45 days.Tenn. Code Ann. § 47-18-3203(b)(1) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Appeals
2
Internal appeal decided within 60 days; denial must give a way to complain to the Attorney General and Reporter.Tenn. Code Ann. § 47-18-3203(c) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Universal opt-out
0
No universal opt-out or authorized agent requirement.Tenn. Code Ann. §§ 47-18-3201 to -3213 (no provision) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.

Business duties

Assessments
2
Assessments for targeted ads, sale, risky profiling and sensitive data; available to the AG.Tenn. Code Ann. § 47-18-3206 · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Processor contracts
2
Contract with confidentiality, deletion, compliance information, assessments or independent report, and written subcontractor flow-down.Tenn. Code Ann. § 47-18-3205(b) · source ↗ No objection right found. Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Privacy notice
1
Notice of categories, purposes, rights and appeal, categories sold and recipients; clear sale and targeted ads disclosure.Tenn. Code Ann. § 47-18-3204(c)-(d) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Loyalty programs
1
Bona fide loyalty programs carved out of non-discrimination rule.Tenn. Code Ann. § 47-18-3204(a)(5) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
De-identified data
3
Public commitment not to reidentify, contract duties for recipients, and pseudonymous data rules.Tenn. Code Ann. § 47-18-3207 · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.

Enforcement

Who enforces
1
Attorney General and Reporter has exclusive authority. NIST Privacy Framework program is an affirmative defense.Tenn. Code Ann. §§ 47-18-3212(a), 47-18-3213 · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Cure period
0
Permanent 60-day cure period after written AG notice.Tenn. Code Ann. § 47-18-3212(b) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Maximum penalty
3
Up to $7,500 per violation; court may award treble damages for willful or knowing violations.Tenn. Code Ann. § 47-18-3212(d) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Private action
0
No private right of action.Tenn. Code Ann. § 47-18-3212(e) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.
Rulemaking
0
No rulemaking authority.Tenn. Code Ann. §§ 47-18-3201 to -3213 (no provision) · source ↗ Read from House amendment text to HB 1181 (enacted as Pub. Ch. 408, 2023); verify against enrolled text.

Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL