United States of America: Implemented Tennessee Information Protection Act including cybersecurity regulation (HB 1181/SB 73)
Description
Implemented Tennessee Information Protection Act including cybersecurity regulation (HB 1181/SB 73)
On 1 July 2025, the Tennessee Information Protection Act enters into force. The Act applies to business entities active in the state that, annually, either control or process personal information of at least 100'000 consumers or control or process personal information of at least 25'000 consumers and derive more than 50% of gross revenue from the sale of personal information. Under the Act, data controllers are required to implement cybersecurity measures to safeguard the confidentiality, integrity, and accessibility of personal information.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2023-01-10
under deliberation
2023-01-10
under deliberation
2023-04-10
under deliberation
2023-04-21
adopted
2023-05-11
adopted