Securiti Tops DSPM ratings by GigaOm
ViewLearn how you can leverage Securiti’s Data Command Center to address data security, privacy, governance, and compliance.
Request a Demo
Tennessee has enacted the Tennessee Information Protection Act (TIPA), making it the latest state in the U.S. to implement comprehensive data privacy regulation. The legislation was unanimously passed by the State General Assembly and signed into law by Governor Bill Lee on May 11, 2023, with an effective date of July 1, 2025.
While TIPA includes many standard provisions found in several state data privacy laws across the US, it distinguishes itself by emphasizing an affirmative defense for organizations adhering to the National Institute of Standards and Technology (NIST) privacy framework.
Additionally, TIPA allows Tennessee courts to impose treble damages for willful or knowing violations, making it stricter in some aspects compared to similar laws in Virginia and Indiana.
Securiti enables organizations to comply with Tennessee Information Protection Act (TIPA) through AI-driven PI data discovery, DSR automation, documented accountability, enhanced visibility into data processing activities, and AI-driven process automation.
Securiti supports enterprises' journey toward compliance with Tennessee Information Protection Act (TIPA) through automation, enhanced data visibility, and identity linking.
TIPA Provisions
Use our collaborative, multi-regulation, readiness assessment system to measure your organization's posture against TIPA requirements, identify gaps, and address compliance risks.
TIPA Provisions
Automate compliance with TIPA using Securirti common controls and tests.
Section(s): 47-18-3204(c), 47-18-3204(d), 47-18-3204(e)
Automatically update and refresh your privacy policies and notices. Build and publish a privacy notice with pre-built templates in compliance with the TIPA.
Section(s): 47-18-3204(a)(2), 47-18-3204(a)(6)
Monitor consent for various data processing activities via the central dashboard. Track consent revocation to prevent the processing or transfer of data without consent.
Section(s): 47-18-3204(a)(2), 47-18-3204(a)(6), 47-18-3204(d)
Scan websites to classify cookies, deploy customized consent collection points, and link consent to user identities and personal data categories collected from endpoints.
Section(s): 47-18-3201(3), 47-18-3201(17), 47-18-3201(18), 47-18-3201(22), 47-18-3201(26)
Discover personal data and sensitive data stored across all systems within the organization and link it to unique data subjects. Visualize personal data sprawl and identify compliance risks.
Section(s): 47-18-3204(a)(1)
Trace data flow across your systems, catalog data collection and transfer, and document business process flows internally and to the processors.
Section(s): 47-18-3203, 47-18-3204(e)
Create customized web forms and accept verified DSR requests. Automate the initiation of the access, correction, deletion, portability and opt-out request fulfillment workflows in compliance with the TIPA.
Tennessee Code Section 47-18-2107
Track and manage potential incidents and data breaches with automated notification guidance based on global regulatory requirements.
Section(s): 47-18-3206
Initiate Data Protection Assessments (DPAs) using compliance templates, invite stakeholders to contribute and review responses, track progress in real-time, and share approved assessments with third parties.
Section(s): 47-18-3205
You can track privacy and security readiness from a single interface for all your service providers. You can also collaborate instantly with processors and manage all processor agreements and compliance documents.
Section(s): 47-18-3204(a)(3)
Discover and auto-remediate security misconfigurations in SaaS and IaaS data systems using a library of rules based on vendor recommendations, industry standards, and best practices.
Here are the key facts about the Tennessee Information Protection Act (TIPA):
TIPA is Tennessee's comprehensive data privacy regulation, aligning with similar laws in other U.S. states.
TIPA requires data controllers to limit personal information collection to what is adequate, relevant, and reasonably necessary for the purposes for which the data is processed.
TIPA requires the controllers to establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal information.
Controllers must not process sensitive data concerning a consumer without obtaining the consumer's consent.
TIPA provides an affirmative defense for organizations that adhere to the National Institute of Standards and Technology (NIST) privacy framework, incentivizing strict data privacy measures.
Controllers must conduct data protection impact assessments (DPIAs).
Tennessee courts are authorized to award treble damages (triple the actual damages) for willful or knowing violations of the act.
TIPA provides data subjects with the right to access, right to correction, right to deletion, right to data portability, and the right to opt-out.
TIPA will come into effect on July 1, 2025.
At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.
Copyright © 2024 Securiti · Sitemap · XML Sitemap
info@securiti.ai
Securiti, Inc.
300 Santana Row
Suite 450
San Jose, CA 95128
