Technology (Data Privacy)

passed · Tennessee · Senate Mar 12, 2026

SB 1799: Internet and e-Commerce - As introduced, requires that if an account holder deletes the account holder's account on a social media platform, the social media platform shall delete all personal information pertaining to the deleted account or collected directly through the use of the social media platform through the deleted account by the account holder or another user. - Amends TCA Title 4 and Title 47, Chapter 18.

Tennessee's SB 1799 requires social media platforms (like Facebook or Instagram) to delete all personal information linked to an account when the account holder deletes their account. This applies to data collected directly through the platform by the account holder or other users, excluding publicly available information or de-identified data. The law creates a private right to sue platforms that fail to comply, allowing for damages, penalties, and attorney fees. It takes effect January 1, 2027, and excludes email services, cloud storage, payment platforms, and other non-social media services from its scope.

Topics ✓ TechnologySupports TechnologyRequires deletion of personal data upon account deletion, strengthening user privacy protections with private right to sue for non-compliance.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track

in committee · Tennessee · Senate Feb 5, 2026

SB 2100: Consumer Protection - As introduced, requires certain data controllers to annually register with the consumer protection division of the office of the attorney general and reporter; requires the division to create and maintain a website and accessible deletion mechanism that a consumer can use at no cost to make a single deletion request that is binding on all controllers registered with the division; makes other related changes to the Tennessee Information Protection Act. - Amends TCA Title 47, Chapter 18, Part 33.

SB 2100 requires businesses that collect personal information for commercial purposes (like selling or sharing data) to annually register with Tennessee's Attorney General's Consumer Protection Division. The bill mandates the division to create a free, accessible website where Tennessee consumers can submit a single deletion request to remove their personal information from all registered businesses at once, without needing to contact each company individually. The system must be secure, work for people with disabilities, and allow consumers to modify or verify requests, with businesses required to process deletions within 45 days or treat unverified requests as opt-outs for data sales. Non-compliant businesses face civil penalties under Tennessee's data protection law.

Topics ✓ TechnologySupports TechnologyMandates data controller registration and creates a centralized, free deletion tool for consumers, strengthening data privacy protections under Tennessee's consumer protection framework.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Tennessee · Senate Mar 10, 2026

SB 1998: Consumer Protection - As introduced, requires certain food retail establishments to use a nondigital presentation of price; prohibits a food retail establishment from using personalized algorithmic pricing; makes other changes related to food retail establishments. - Amends TCA Title 47 and Title 53.

SB 1998 requires large food retail stores (over 15,000 sq. ft. for primary food sales or over 85,000 sq. ft. with 10% food sales area) to display prices using physical signs or labels instead of digital screens. It prohibits stores from using personalized algorithmic pricing - setting different prices for customers based on their personal data, including protected characteristics like race, gender, or location. The bill defines "surveillance pricing" as using tracking technology to customize prices and mandates clear, visible price displays at the point of purchase. These changes aim to prevent discriminatory pricing practices and ensure transparency for consumers.

Topics ✓ TechnologySupports TechnologyProhibits personalized algorithmic pricing using personal data (including protected characteristics), directly protecting consumer privacy from tech-enabled discrimination.95% confidence

Sub-Topics Data Privacy Tags Consumer Protection

Track

died · Tennessee · House Mar 18, 2026

HB 1468: Consumer Protection - As introduced, prohibits an entity from setting the price of a specific good or service using personalized algorithmic pricing; designates a violation as an unfair or deceptive act or practice affecting trade or commerce in violation of the Tennessee Consumer Protection Act of 1977. - Amends TCA Title 29; Title 45; Title 47 and Title 66.

HB 1468 prohibits businesses in Tennessee from setting prices for specific goods or services using "personalized algorithmic pricing" - a practice where algorithms adjust prices based on personal data about individual consumers. The bill directly affects most businesses operating in Tennessee (including retailers, service providers, and online platforms) but excludes insurance companies, financial institutions under federal law, and subscription-based agreements. Violating this rule would be treated as an unfair or deceptive practice under Tennessee's Consumer Protection Act, subjecting violators to existing penalties and remedies like fines or consumer restitution. The law takes effect on July 1, 2026, and does not apply to price adjustments based on factors like mileage or trip duration in ride-sharing services.

Topics ✓ TechnologySupports TechnologyProhibits algorithmic pricing using personal data, regulating tech-driven consumer pricing as deceptive under consumer protection law, aligning with data privacy and consumer protection indicators.90% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

in committee · Tennessee · Senate Apr 7, 2026

SB 1807: Consumer Protection - As introduced, prohibits an entity from setting the price of a specific good or service using personalized algorithmic pricing; designates a violation as an unfair or deceptive act or practice affecting trade or commerce in violation of the Tennessee Consumer Protection Act of 1977. - Amends TCA Title 29; Title 45; Title 47 and Title 66.

SB 1807 prohibits businesses in Tennessee from using computer algorithms to set prices for specific goods or services based on personal data about individual consumers. This directly affects companies like ride-sharing apps, e-commerce platforms, or retailers that adjust prices using personal information such as location, browsing history, or purchase patterns. The bill exempts insurance companies, financial institutions under federal law, and existing subscription agreements. Violations would be treated as unfair business practices under Tennessee’s Consumer Protection Act, subject to penalties and remedies under that law, effective July 1, 2026.

Topics ✓ TechnologySupports TechnologyProhibits algorithmic pricing using personal data, protecting consumer privacy and preventing deceptive practices under consumer protection law.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

in committee · Tennessee · Senate Mar 25, 2025

SB 1339: Consumer Protection - As introduced, changes, from 45 to 50 days from receipt of a request, the time that a controller has to inform a consumer of the controller's decision to decline to take action regarding the consumer's authenticated request under the Tennessee Information Protection Act. - Amends TCA Title 4; Title 5; Title 6; Title 7; Title 8; Title 10; Title 29; Title 39; Title 47 and Title 48.

SB 1339 extends the response time for businesses under Tennessee's data privacy law from 45 to 50 days when handling consumer requests for personal data. It specifically amends Section 47-18-3304(b)(2) of Tennessee Code to change the deadline for businesses to inform consumers of their decision to decline action on verified requests. This affects businesses that collect personal information of Tennessee residents and must comply with the Tennessee Information Protection Act. The change will take effect on July 1, 2025.

Topics ✓ TechnologySupports TechnologyBill amends Tennessee's data privacy law to extend response time for consumer requests, maintaining regulatory framework for data protection under the Tennessee Information Protection Act.90% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

signed · Tennessee · House Apr 28, 2025

HB 1316: Driver Licenses - As enacted, prohibits the use of digital driver licenses and digital photo identification licenses for voter identification purposes; regulates the use, retention, and disclosure of data submitted by persons participating in the digital driver license system, including biometric identifiers; prohibits geolocation data from being collected for purposes of the digital driver license system; revises other provisions related to driver licenses. - Amends TCA Section 2-7-112 and Title 55, Chapter 50.

HB 1316 prohibits the use of digital driver licenses or digital photo IDs for voter identification purposes in Tennessee. The bill amends state law to require physical driver licenses for voting verification, while regulating data handling for digital license systems: it bans geolocation tracking, limits data retention to three days, and restricts biometric data collection (like facial scans) to only verifying identity against a physical license photo. These provisions directly affect Tennessee residents using digital driver licenses for non-voting purposes. The law, effective April 24, 2025, also mandates explicit user consent for biometric data and prohibits selling or sharing such data beyond law enforcement needs.

Topics ✓ TechnologySupports TechnologyRestricts geolocation, limits data retention to 3 days, and restricts biometric use to verification only, directly protecting data privacy in digital ID systems.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

in committee · Tennessee · Senate May 27, 2025

SB 1296: Criminal Offenses - As enacted, creates the criminal offense of threatening to commit an act of mass violence; creates the criminal offense of posting on a publicly accessible website the telephone number or home address of an individual with the intent to cause harm or a threat of harm to the individual or a member of the individual's family or household. - Amends TCA Title 39, Chapter 13, Part 8 and Title 39, Chapter 17, Part 3.

SB 1296 creates two new criminal offenses in Tennessee: (1) threatening to commit "mass violence" (defined as an act likely to cause serious injury or death to four or more people), and (2) posting someone’s home address or phone number online with intent to cause harm. The bill directly affects individuals whose personal information is shared online for malicious purposes and targets threats made in places like schools, government buildings, or events. Violations of the first offense range from a Class E felony (standard) to Class D felony if the threat involves schools, events, or weapons preparation. The bill takes effect July 1, 2025, and excludes public officials acting within legal duties.

Topics ✗ Criminal JusticeOpposes Criminal JusticeCreates new criminal offenses expanding scope of criminal law, aligning with 'expands criminalization' indicator for 'oppose' stance90% confidence ✓ TechnologySupports TechnologyBill criminalizes online sharing of personal data (phone/address) with intent to cause harm, strengthening data privacy protections by preventing malicious use of digital information.90% confidence

Sub-Topics Data Privacy

Track

in committee · Tennessee · House Mar 12, 2025

HB 630: Consumer Protection - As introduced, authorizes a consumer to designate an authorized agent who may opt the consumer out of the processing of the consumer’s personal data; requires a controller to comply with an opt-out request from an authorized agent if certain conditions are met. - Amends TCA Title 47, Chapter 18.

HB 630 allows Tennessee consumers to appoint an agent (like a family member or advocate) to opt them out of companies processing their personal data. Companies must verify both the consumer’s identity and the agent’s authority before honoring these requests. The bill requires companies to provide clear opt-out links on websites and implement a standardized "preference signal" system by 2026, ensuring consumers can easily opt out of data sales or targeted advertising without default settings. It also addresses conflicts with loyalty programs and clarifies rules around financial incentives for data sharing. The law takes effect July 1, 2025.

Topics ✓ TechnologySupports TechnologyBill strengthens data privacy by enabling consumer opt-outs via agents, requiring company compliance with verified requests, and mandating standardized opt-out systems - directly advancing consumer data protection.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

died · Tennessee · Senate Feb 5, 2025

SB 195: Consumer Protection - As introduced, prohibits certain entities from sharing, selling, or otherwise distributing a vehicle's driving data without the explicit, written consent of the owner of the vehicle, regardless of how or where the driving data is collected or stored. - Amends TCA Title 4; Title 5; Title 6; Title 47 and Title 55.

SB 195 prohibits vehicle manufacturers, corporations, and third parties from sharing, selling, or distributing a vehicle's driving data without the explicit, written consent of the vehicle owner. It defines "driving data" broadly to include information from sensors, infotainment systems, telematics, and connected devices (like brake events, location, or vehicle health). Entities must disclose how data is collected and obtain annual written consent, with easy mechanisms for owners to revoke permission. The bill does not apply to data shared with government agencies like the National Highway Traffic Safety Administration under federal law. (Note: The bill was withdrawn on February 5, 2025, per recent actions.)

Topics ✓ TechnologySupports TechnologyMandates explicit consent for vehicle data sharing, strengthening consumer data privacy protections in connected vehicles per bill's core requirement.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track