Securiti launches Gencore AI, a holistic solution to build Safe Enterprise AI with proprietary data - easily

View
Contact Us See a demo

Navigating the Tennessee Information Protection Act (TIPA): Key Details

In this infographic, you will learn:

  • Scope, applicability and exemptions under TIPA,
  • Key definitions and organizational obligations,
  • Data processor responsibilities and data subject rights,
  • Noncompliance penalties and how to operationalize TIPA.

DOWNLOAD INFOGRAPHIC

Award-winning technology, built by a proven team, backed by confidence. Learn more.

Tennessee enacted the Tennessee Information Protection Act (TIPA), becoming one of the U.S. states with a comprehensive data privacy law. TIPA incorporates standard provisions found in other state data privacy laws but stands out by emphasizing an affirmative defense for organizations that adopt strict data privacy practices aligned with the NIST privacy framework.

TIPA is similar to data privacy laws in Virginia and Indiana but stricter in some aspects, such as granting Tennessee courts the authority to award treble damages for willful or knowing violations. The legislation received unanimous approval from the State General Assembly and was signed into law by Governor Bill Lee on May 11, 2023. It will take effect on July 1, 2025.

TIPA outlines several obligations for organizations, such as purpose limitation, non-discrimination, security measures, consent requirements and privacy notice requirements, and conducting data protection assessments, among several other requirements. It also provides data subjects with several rights, such as the right to access, correct, delete, portability, disclosure and opt-out.

Download Infographic
Navigating the Tennessee Information Protection Act

Frequently Asked Questions

Tennessee Information Protection Act (TIPA) is a state data privacy law in Tennessee. It applies to businesses operating in Tennessee or targeting its residents if they generate over $25 million in annual revenue and either process the personal information of at least 175,000 consumers annually or handle the personal data of at least 25,000 consumers while deriving more than 50% of their gross revenue from selling personal information.

The Tennessee Attorney General & Reporter (AGR) holds exclusive authority to enforce TIPA. The AGR can initiate investigations based on reasonable cause arising from their own inquiries or consumer and public complaints and may issue civil investigative demands.

Courts can impose civil penalties of up to $15,000 per violation, with each provision and each impacted consumer considered a separate violation.

All-in-One Solution For Your Business Needs

The Multi-disciplinary practice to grow trust-equity of your brand and comply with privacy regulations

Comparative Analysis of Healthcare Laws: Alberta, Ontario, Quebec View More

Comparative Analysis of Healthcare Laws: Alberta, Ontario, Quebec

Gain insights into Alberta, Ontario, and Quebec healthcare laws. Discover key differences, whom they apply to, regulatory body, notification requirements, rights, etc.

FDBR View More

Navigating Florida’s Digital Bill of Rights (FDBR): Essential Insights

Download the infographic to learn key details about Florida's Digital Bill of Rights (FDBR) and simplify your compliance journey with Securiti.

EU AI Act Battlecard View More

EU AI Act Battlecard

Securiti’s AI Act battlecard is designed as the perfect foundational resource for organizations that want an elementary understanding of the various aspects of AI Act compliance.

The NJDPA does not grant a private right of action, meaning individuals cannot sue under the law. Businesses are allowed a 30-day cure period to address violations. Noncompliance penalties are $10,000 for a first violation and $20,000 for each subsequent violation. View More

Navigating the New Jersey Data Privacy Act (NJDPA): Key Details

Download the infographic to learn key details about the New Jersey Data Privacy Act (NJDPA) and simplify your compliance journey with Securiti.

ICDPA View More

Navigating the Indiana Consumer Data Protection Act (ICDPA): Key Details

Download the infographic to learn key details about the Indiana Consumer Data Protection Act (ICDPA) and simplify your compliance journey with Securiti.

Cyber Security Legislative Package (CSLP) 2024 View More

Cyber Security Legislative Package (CSLP) 2024: A New Era for Cyber Security in Australia

Download the infographic to gain insights into Australia’s Cyber Security Legislative Package (CSLP). Learn more about how to ensure swift compliance.

A Pathway To AI Governance View More

A Pathway To AI Governance

This infographic provides a detailed overview of why AI governance is so important for organizations and how it directly translates into business success.

View More

Microsoft 365 Copilot Readiness Checklist

This infographic lists the top security challenges orgs face in their Microsoft Sharepoint environment and the mitigation strategies to overcome them, enabling secure Copilot rollout.

View More

Saudi PDPL Mapping: A Step-by-Step Compliance Roadmap

Download the Saudi PDPL Mapping infographic for a step-by-step compliance roadmap. Simplify your compliance journey with Securiti PDPL Compliance.

View More

OWASP Top 10 for LLM Applications: Essential Security Insights

Explore the 10 key vulnerabilities of LLMs, including prompt injection, data poisoning, and sensitive information leaks, with essential mitigation steps.

What's
New