Tennessee Information Protection Act (opt out of automated profiling decisions)
Tennessee Information Protection Act (TIPA)
Tennessee · Tenn. Code Ann. 47-18-3301 et seq. (TIPA); profiling opt-out at 47-18-3304
- Status
- In effect
- Took effect
- July 1, 2025
- Applies to
- Controllers and processors meeting TIPA's revenue and data-volume thresholds that conduct business in Tennessee or target Tennessee residents.
- Enforced by
- Tennessee Attorney General and Reporter (exclusive enforcement).
Tennessee's consumer privacy law gives state residents rights over how businesses handle their personal information, including the right to opt out of profiling that is carried out solely through automated processing and used to make decisions with legal or similarly significant effects. Businesses that act as controllers must also conduct and document data protection assessments for higher-risk processing activities, including certain profiling. The Tennessee Attorney General has exclusive enforcement authority, and there is no private right of action.
Who is protected: Tennessee residents acting in an individual or household context (consumers).
Legal detail
TIPA (Tenn. Code Ann. 47-18-3301 et seq.; Title 47, Ch. 18, Part 33) grants a profiling opt-out under 47-18-3304 for solely-automated decisions producing legal or similarly significant effects and requires data protection assessments; the AG may seek civil penalties up to $7,500 per violation.
Key facts
| Jurisdiction | Tennessee |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | May 11, 2023 |
| Citation | Tenn. Code Ann. 47-18-3301 et seq. (TIPA); profiling opt-out at 47-18-3304 |
| Private right of action | No, agency enforcement only |
| Penalties | Civil penalties of up to $7,500 per violation, enforced solely by the Attorney General; willful or knowing violations may be subject to treble penalties. A 60-day cure period applies after written notice. |
| Topics | consumer data privacy · automated decision-making |
| Agency page | Tennessee Attorney General — Guidance on the Tennessee Information Protection Act |
More AI rules in Tennessee
- Tennessee Teen Social Media and Internet Safety Act · In effect
- TN SB 151 (2017 AV Act) · In effect
- TN drone trespass / FFUSA · In effect
- Tennessee HB 2163 (AI-generated child abuse images are illegal 'material') · In effect
- Tennessee SB 837 (AI is not a 'person' under TN law) · In effect
- Tennessee SB 1580 (AI can't claim to be a mental health professional) · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare companies · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.