United States of America: Implemented Tennessee Information Protection Act including data protection regulation (HB 1181/SB 73)

Description

Implemented Tennessee Information Protection Act including data protection regulation (HB 1181/SB 73)

On 1 July 2025, the Tennessee Information Protection Act enters into force. The Act applies to business entities active in the state that, annually, either control or process personal information of at least 100'000 consumers or control or process personal information of at least 25'000 consumers and derive more than 50% of gross revenue from the sale of personal information. The Act sets out consumer data rights, including access to personal information, data correction, data deletion, and obtaining a copy of the consumer's personal information. In addition, the Act includes obligations for data controllers, including abiding by principles of adequacy, relevance, and reasonable necessity in processing data, following laws prohibiting unfair discrimination against consumers, and obtaining consumer consent before processing sensitive personal data.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2023-01-10
under deliberation

On 10 January 2023, the Tennessee Information Protection Act (Senate Bill 0073), which includes dat…

2023-01-10
under deliberation

On 10 January 2023, the Tennessee Information Protection Act HB 1181, the House companion Bill of S…

2023-04-10
under deliberation

On 10 April 2023, the Tennessee Information Protection Act (House Bill 1181) was passed by the Tenn…

2023-04-21
adopted

On 21 April 2023, the Tennessee Information Protection Act (House Bill 1181) was adopted after bein…

2023-05-11
adopted

On 11 May 2023, the Tennessee Information Protection Act (HB 1181/SB 73) was signed into law by the…

2025-07-01
in force

On 1 July 2025, the Tennessee Information Protection Act enters into force. The Act applies to busi…