Tennessee Information Protection Act (TIPA)
Complete compliance guide for companies with <200 employees. Everything you need to know about TIPA requirements, deadlines, and penalties.
45 calendar days
+ 45 days extension
$7,500/violation
Up to $7,500 per violation under the Tennessee Consumer Protection Act. A 60-day cure period applies with no sunset date. Uniquely, compliance with NIST privacy frameworks serves as an affirmative defense against alleged violations.
175,000 consumers
or $25,000,000 revenue
$4,000 – $14,000
4-10 weeks
Mid-Market Compliance Guide
Tennessee's TIPA requires BOTH $25 million+ annual revenue AND processing data of 175,000+ consumers (or 25,000+ consumers with 50%+ revenue from data sales). The revenue-plus-consumer threshold makes this one of the narrower US state privacy laws. The unique NIST affirmative defense incentivizes companies to follow recognized privacy frameworks — a feature no other US state law offers.
Key Requirements
- Provide a clear and accessible privacy notice
- Limit data collection to what is adequate, relevant, and necessary
- Obtain consent before processing sensitive data
- Conduct data protection assessments for high-risk processing
- Implement and maintain reasonable data security practices
- Compliance with NIST frameworks may serve as an affirmative defense
Consumer Rights
Business Obligations
- 1.Provide privacy notice with required disclosures
- 2.Respond to consumer requests within 45 days
- 3.Provide an appeals process for denied requests
- 4.Execute data processing agreements with processors
- 5.Implement reasonable data security measures
Exemptions
- •HIPAA-covered entities and data
- •GLBA-covered financial institutions
- •Nonprofits
- •Higher education institutions
- •Government entities
Related Privacy Laws
Recommended Compliance Tools
No vendors have been reviewed for TIPA coverage yet.
Browse all compliance toolsGet a mid-market compliance checklist for TIPA
We'll send you a practical, step-by-step checklist tailored for companies with <200 employees. No spam, unsubscribe anytime.
See how DPAs enforce TIPA in practice
Real fines, real violations, real lessons. Browse our enforcement database to understand what gets penalized under TIPA.
Disclaimer: This is general information, not legal advice. Consult a qualified attorney for your specific situation. Laws and regulations may change. Last reviewed: 3/3/2026.