Tennessee Information Protection Act

Tennessee's comprehensive consumer privacy law gives residents rights to access, correct, delete, and port their personal information and to opt out of sale, targeted advertising, and significant-decision profiling. It applies only to businesses with more than $25 million in revenue that also meet a data-volume threshold, requires opt-in consent for sensitive data, and gives a unique affirmative defense to businesses whose written privacy program reasonably conforms to the NIST Privacy Framework.