Tennessee Information Protection Act (TIPA)
Tennessee · Tenn. Code Ann. 47-18-3301 et seq. (TIPA); profiling opt-out at 47-18-3304
Tennessee's consumer privacy law gives state residents rights over how businesses handle their personal information, including the right to opt out of profiling that is carried out solely through automated processing and used to make decisions with legal or similarly significant effects. Businesses that act as controllers must also conduct and document data protection assessments for higher-risk processing activities, including certain profiling. The Tennessee Attorney General has exclusive enforcement authority, and there is no private right of action.
Technical detail
TIPA (Tenn. Code Ann. 47-18-3301 et seq.; Title 47, Ch. 18, Part 33) grants a profiling opt-out under 47-18-3304 for solely-automated decisions producing legal or similarly significant effects and requires data protection assessments; the AG may seek civil penalties up to $7,500 per violation.
Who is protected: Tennessee residents acting in an individual or household context (consumers).
Who must comply: Controllers and processors meeting TIPA's revenue and data-volume thresholds that conduct business in Tennessee or target Tennessee residents.
Key facts
| Jurisdiction | Tennessee |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Limited protection |
| Effective date | 2025-07-01 |
| Enacted | 2023-05-11 |
| Citation | Tenn. Code Ann. 47-18-3301 et seq. (TIPA); profiling opt-out at 47-18-3304 |
| Enforced by | Tennessee Attorney General and Reporter (exclusive enforcement). |
| Private right of action | No — agency enforcement only |
| Penalties | Civil penalties of up to $7,500 per violation, enforced solely by the Attorney General; willful or knowing violations may be subject to treble penalties. A 60-day cure period applies after written notice. |
| Topics | consumer data privacy · automated decision-making |
| Last verified | 2026-06-16 |
| Official source | Tennessee Attorney General — Guidance on the Tennessee Information Protection Act ↗ |
More AI rules in Tennessee
- TN SB 151 (2017 AV Act) · In effect
- TN drone trespass / FFUSA · In effect
- Tennessee HB 2163 (AI-generated child abuse images are illegal 'material') · In effect
- Tennessee SB 837 (AI is not a 'person' under TN law) · In effect
- Tennessee SB 1580 (AI can't claim to be a mental health professional) · In effect
- ELVIS Act · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for lo · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.