# Tennessee — US state consumer data privacy laws: applicability thresholds by state

For Tennessee, law name and abbreviation is Tennessee Information Protection Act (TIPA); effective date is July 1, 2025; consumer volume threshold is During a calendar year, control or process personal information of at least one hundred seventy-five thousand (175,000) consumers; revenue-from-data-sales threshold is Control or process personal information of at least twenty-five thousand (25,000) consumers and derive more than fifty percent (50%) of gross revenue from the sale of personal information; revenue floor is Exceed twenty-five million dollars ($25,000,000) in revenue, recorded from its source on 2026-08-12.

- **State:** Tennessee _(our reading, not quoted from the source)_
- **Law name and abbreviation:** Tennessee Information Protection Act (TIPA)
- **Effective date:** July 1, 2025 _(verified: appears in the quote below)_
- **Consumer volume threshold:** During a calendar year, control or process personal information of at least one hundred seventy-five thousand (175,000) consumers
- **Revenue-from-data-sales threshold:** Control or process personal information of at least twenty-five thousand (25,000) consumers and derive more than fifty percent (50%) of gross revenue from the sale of personal information
- **Revenue floor:** Exceed twenty-five million dollars ($25,000,000) in revenue
- **Threshold combination logic:** AND — requires exceeding $25,000,000 in revenue AND one of the volume thresholds
- **Key exemptions:** State and local government entities; HIPAA-covered entities and business associates; GLBA-regulated financial institutions; nonprofit organizations; institutions of higher education
- **Enforcement mechanism:** Attorney General; 60-day cure period; no private right of action
- **Statute citation:** Tenn. Code Ann. § 47-18-3201 et seq.
- **Notes:** Tennessee has the highest consumer volume threshold (175,000) of any state and requires both a $25M revenue floor AND volume thresholds (like Utah). This makes Tennessee's law one of the narrowest in scope. Tennessee uses the term 'personal information' rather than 'personal data.'

## What the source says

> However, the Tennessee Code Commission is requested to include the headings in any compilation or publication containing this act. SECTION 6. This act takes effect July 1, 2025, the public welfare requiring it.

## Source

- https://publications.tnsosfiles.com/acts/113/pub/pc0408.pdf

Last verified: 2026-08-12. Review by: 2026-11-10.
Part of [US state consumer data privacy laws: applicability thresholds by state](https://referencesource.org/state-data-privacy-applicability-thresholds/).