Tennessee has a comprehensive consumer privacy statute, the Tennessee Information Protection Act (TIPA). This page collects our coverage touching Tennessee, alongside the federal rules that apply there. For the statute itself rather than the news, see our Tennessee privacy law page.
Breach Notification
October 19, 2026
Tennessee replaced its breach statute twice in two years. Public Chapter 692 of 2016 set a 45-day deadline and dropped the encryption exception; Public Chapter 91 of 2017 rewrote section 47-18-2107 in full, restoring encryption by reference to FIPS 140-2, keeping 45 days, adding a materiality test and a credit bureau duty, and keeping a customer's right to sue.
Read more →
AI & Privacy
October 19, 2026
Tennessee's Ensuring Likeness, Voice, and Image Security Act, enacted as Public Chapter 588 and effective July 1, 2024, renamed the state's 1984 publicity statute, added a voice right that covers simulations, and created civil liability for public distribution of unauthorized voices or likenesses and for tools whose primary purpose is producing a particular person's voice or likeness.
Read more →
State Comprehensive Privacy Laws
October 19, 2026
Tennessee's privacy statute, enacted as Public Chapter 408 of 2023 and in force since July 1, 2025, combines a $25 million revenue floor with high consumer counts, broad entity exemptions, a permanent 60-day cure, an affirmative defense for programs aligned to the NIST Privacy Framework, and court-awarded treble damages for willful violations.
Read more →