Bill > HB1181

This bill enacts the "Tennessee Information Protection Act," which amends several Tennessee Code sections to establish new requirements and rights related to the processing of personal information. The key provisions include: - Defining key terms like "personal information," "sensitive data," and "processing," and establishing the scope of the law, which applies to businesses that meet certain revenue and data processing thresholds. - Granting consumers the right to access, correct, delete, and download their personal information, as well as opt out of sales and targeted advertising. Businesses must have processes to authenticate and respond to consumer requests. - Requiring businesses to be transparent about their data practices, limit collection to what is necessary, and obtain consent before processing sensitive data. Businesses must also conduct data protection assessments for certain high-risk processing activities. - Exempting certain entities and information, such as financial institutions, healthcare data, and educational records, from some or all of the law's requirements. - Authorizing the Attorney General to enforce the law and impose civil penalties for violations. The bill is intended to provide Tennessee consumers with more control and transparency over how their personal information is collected and used by businesses.