Tennessee's Strategic Technology Solutions provides accessibility guidance for state agencies under the Enterprise Accessibility Policy.
Tennessee Accessibility & Privacy Laws
Tennessee enacted the Tennessee Information Protection Act (TIPA) in 2023, effective July 1, 2025. TIPA provides comprehensive privacy protections for Tennessee residents with a business-friendly approach, including an affirmative defense for organizations with compliant privacy programs. Tennessee state government also maintains accessibility policies for digital services.
→
Accessibility Standards
State Government Policy
→
Privacy Law
TIPA - Effective July 2025
Comprehensive privacy law with unique affirmative defense provisions for organizations with National Institute of Standards and Technology (NIST) compliant privacy programs.
Tennessee Information Protection Act (TIPA)
Tennessee's TIPA was signed into law on May 11, 2023, and becomes effective July 1, 2025. A notable feature is the affirmative defense available to businesses that maintain privacy programs conforming to NIST privacy framework standards.
Who Must Comply?
Businesses that conduct business in Tennessee or target Tennessee residents AND meet these thresholds:
- Annual revenue exceeding $25 million, AND
- Control or process personal information of at least 25,000 consumers and derive more than 50% of gross revenue from sale of personal information, OR
- Control or process personal information of at least 175,000 consumers
Consumer Rights Under TIPA
| Right | Description |
|---|---|
| Right to Access | Confirm whether personal information is being processed and access that data |
| Right to Correct | Correct inaccuracies in personal information |
| Right to Delete | Delete personal information provided by or collected about the consumer |
| Right to Portability | Obtain a copy of personal information in portable format |
| Right to Opt Out | Opt out of targeted advertising, sale of personal information, and certain profiling |
Unique Features of TIPA
- Affirmative Defense: Businesses with NIST-compliant privacy programs have an affirmative defense against TIPA enforcement actions
- Revenue Threshold: Only applies to businesses with annual revenue exceeding $25 million
- Higher Consumer Threshold: 175,000 consumer threshold is higher than most other state privacy laws
- Extended Cure Period: 60-day cure period for violations
Sensitive Data
TIPA requires opt-in consent before processing sensitive personal information, including:
- Racial or ethnic origin
- Religious beliefs
- Mental or physical health diagnosis
- Sexual orientation
- Citizenship or immigration status
- Genetic or biometric data for identification
- Personal information from known children
- Precise geolocation data
Tennessee State Government Accessibility
Tennessee's Strategic Technology Solutions (STS) establishes accessibility standards for state agencies through the Enterprise Accessibility Policy, promoting digital inclusion for all Tennessee residents.
Covered Entities
- Tennessee state government agencies
- State contractors and vendors
- Public educational institutions
- Tennessee Board of Regents institutions
- Local government entities
Accessibility Standards
- WCAG 2.0 Level AA compliance as baseline
- Section 508 alignment for federally-funded programs
- Accessibility testing required for new web content
- Alternative formats available upon request
Enforcement
| Aspect | Details |
|---|---|
| Enforcing Authority | Tennessee Attorney General (exclusive enforcement) |
| Cure Period | 60 days to cure violations |
| Penalties | Up to $7,500 per violation |
| Private Right of Action | No private right of action |
| Affirmative Defense | Available for NIST-compliant privacy programs |
→
Business Obligations
- Publish clear privacy notice
- Implement reasonable data security practices
- Conduct data protection assessments
- Honor consumer rights requests within 45 days
- Limit data collection to necessary purposes
- Obtain consent for sensitive data processing
→
Key Agencies
- Tennessee Attorney General
- Strategic Technology Solutions (STS)
- Tennessee Human Rights Commission
- Department of General Services
Related Resources
- US Privacy Laws Overview
- State Privacy Law Comparison
- Business Privacy Obligations
- Consumer Privacy Rights
- ADA Title II Requirements
- All State Laws
- Contact Us
Need Help with Tennessee Compliance?
Tennessee's TIPA offers unique benefits including an affirmative defense for NIST-compliant privacy programs. Contact our experts for guidance on preparing for July 2025 compliance and meeting accessibility obligations.