Tennessee’s Information Protection Act (TIPA), effective July 2025, regulates businesses operating in Tennessee or
serving its residents with over $25 million revenue and significant personal data handling. It grants consumers rights to
access, correct, delete data, and opt out of sales and targeted ads. Businesses must obtain consent for sensitive data,
provide clear privacy notices, conduct risk assessments, and follow strict vendor contract rules. Enforcement by the
Attorney General includes hefty fines but no private lawsuits. Compliance with the NIST Privacy Framework offers a
legal defense.

Read More Here.