Bill > HB0630

This bill amends Tennessee consumer data protection law to allow consumers to designate an authorized agent who can opt out of processing their personal data on their behalf. The authorized agent can use various technologies like internet browser settings or website links to indicate the consumer's intent to opt out. Controllers (organizations handling personal data) must comply with opt-out requests from authorized agents if they can reasonably verify the consumer's identity and the agent's authority. The bill requires controllers to provide a clear opt-out link on their website and, by January 1, 2026, must accept opt-out preference signals sent with consumer consent through platforms or technologies that are user-friendly, non-discriminatory, and comply with existing laws. If an opt-out signal conflicts with a consumer's existing privacy settings or loyalty program participation, the controller must honor the opt-out signal but can notify the consumer of the conflict. Additionally, if a controller suggests a charge for services after an opt-out request, they must clearly present any financial incentives for data retention or use. The law will take effect on July 1, 2025, and is designed to give consumers more control over how their personal data is processed and used for targeted advertising or sales.