Tennessee Information Protection Act

HB 1181

Enacted
2023-05-11
Effective
2025-07-01
Status
enacted
Verified
2026-03-18

Regulatory Snapshot: Tennessee Information Protection Act

Tennessee Information Protection Act (HB 1181) is an enacted law in Tennessee under the Data Privacy category. It was enacted on 2023-05-11 and becomes effective on 2025-07-01. Tennessee currently reports 3 tracked regulations with 2 already in force, giving the state a regulatory strictness score of 31/100 relative to the national baseline. PlainRegWatch last verified this entry on 2026-03-18.

Nationally, 21 states have enacted data privacy statutes and 0 additional bills remain pending — 21 distinct jurisdictions have codified rules in this area so far. That places Tennessee within a mature and broadly adopted data privacy landscape where compliance programs typically hinge on definitions in HB 1181 itself.

Applicability under Tennessee Information Protection Act: $25M+ revenue AND 175K+ consumers, or 25K+ with 50%+ data sale revenue. Penalty exposure is documented as: $7,500/violation. AG enforcement. NIST defense. Notable exemptions: Government, HIPAA, GLBA, nonprofits, higher ed..

Summary

Affirmative defense for NIST-compliant privacy programs.

Key Requirements

Full consumer rights. Data protection assessments. NIST affirmative defense. 60-day cure.

Penalties

$7,500/violation. AG enforcement. NIST defense.

Applicability

$25M+ revenue AND 175K+ consumers, or 25K+ with 50%+ data sale revenue.

Exemptions

Government, HIPAA, GLBA, nonprofits, higher ed.

Frequently Asked Questions

Which states have data privacy regulations?

As of the last verification, 21 states have enacted data privacy regulations, with 0 additional bills pending across other states. Tennessee is among the states that has enacted such legislation. Browse all data privacy regulations at plainregwatch.com for the complete state-by-state comparison.

When was Tennessee Information Protection Act enacted?

Tennessee Information Protection Act was enacted on 2023-05-11 and became effective on 2025-07-01. It was introduced as HB 1181.

What are the penalties for violating Tennessee Information Protection Act?

$7,500/violation. AG enforcement. NIST defense. Note that enforcement mechanisms and penalty structures may vary. Consult the official statute and qualified legal counsel for specific compliance requirements.

Does Tennessee Information Protection Act apply to small businesses?

$25M+ revenue AND 175K+ consumers, or 25K+ with 50%+ data sale revenue. Many state regulations include thresholds or exemptions for smaller organizations. Review the full applicability criteria and consult legal counsel to determine your obligations.

How does Tennessee compare to other states on data privacy?

Tennessee has a regulatory strictness score of 31/100, based on 2 enacted regulations out of 3 tracked. Nationally, 21 states have enacted data privacy laws. Visit our state comparison page for a full ranking.

Where can I read the full text of Tennessee Information Protection Act?

The official text of Tennessee Information Protection Act (HB 1181) is available from the Tennessee legislature. PlainRegWatch links to the official source for every tracked regulation. We recommend reviewing the full statute alongside qualified legal counsel for compliance planning.

Regulation Guides

Plain-language guides to help you understand the broader regulatory landscape.

Disclaimer: This summary is provided for informational purposes only and does not constitute legal advice. Regulation details may have changed since last verification (2026-03-18). Always consult official sources and qualified legal counsel for compliance guidance.

More Tennessee Regulations

Related

Data sourced from official state legislatures, IAPP, NCSL, and federal regulatory trackers. See our methodology for details. Retrieved and formatted by PlainRegWatch Editorial

Verify with EPA →