Technology (Consumer Data Protection)

introduced · Tennessee · House Feb 5, 2026

HB 2336: Consumer Protection - As introduced, updates the mandatory notice regarding security freezes to specify that identity theft complaints to the federal trade commission and attorney general and reporter may be submitted via electronic means as specified by the federal trade commission and the attorney general and reporter, instead of only in writing or via their websites. - Amends TCA Title 4; Title 7; Title 8; Title 10; Title 38; Title 39; Title 40; Title 47; Title 49; Title 53; Title 56; Title 63; Title 68 and Title 71.

HB 2336 updates Tennessee's security freeze notice requirements to allow consumers to submit identity theft complaints electronically to the Federal Trade Commission (FTC) and the Tennessee Attorney General, as specified by those agencies. This replaces the current requirement that complaints must be submitted only in writing or via agency websites. The bill directly affects consumers who use security freezes to protect their identities and the agencies receiving these complaints. It makes no changes to the content or requirements of the complaints, only modernizing the submission method.

Topics ✓ TechnologySupports TechnologyAllows electronic submission of identity theft complaints to FTC/Attorney General, modernizing data privacy complaint process per bill's electronic means update.90% confidence

Sub-Topics Consumer Data Protection Tags Consumer Protection

Track

in committee · Tennessee · House Mar 11, 2026

HB 2623: Consumer Protection - As introduced, increases, from 60 to 65 days, the time that a controller has after receipt of an appeal from a consumer regarding the controller's refusal to take action on a consumer request under the Tennessee Information Protection Act to inform the consumer in writing of action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. - Amends TCA Title 4; Title 39 and Title 47.

HB 2623 extends the time businesses must provide written responses to consumer appeals under Tennessee's Information Protection Act, increasing the deadline from 60 to 65 days. It directly affects consumers who appeal denied requests for their personal data and the businesses (referred to as "controllers") handling those requests. The bill amends Tennessee Code § 47-18-3304(c) to require businesses to explain their decisions in writing within the new 65-day window after receiving an appeal. This is a procedural change to the state's consumer privacy law, with no broader policy shifts.

Topics ✓ TechnologySupports TechnologyExtends response time for consumer data appeals under Tennessee's Privacy Act, requiring written explanations - strengthens data privacy protections.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

in committee · Tennessee · Senate Mar 10, 2026

SB 2519: Consumer Protection - As introduced, updates the mandatory notice regarding security freezes to specify that identity theft complaints to the federal trade commission and attorney general and reporter may be submitted via electronic means as specified by the federal trade commission and the attorney general and reporter, instead of only in writing or via their websites. - Amends TCA Title 4; Title 7; Title 8; Title 10; Title 38; Title 39; Title 40; Title 47; Title 49; Title 53; Title 56; Title 63; Title 68 and Title 71.

SB 2519 updates Tennessee's consumer protection laws to allow identity theft complaint submissions (regarding security freezes) via electronic means approved by the Federal Trade Commission and Tennessee Attorney General, instead of requiring only written submissions or website filings. This change directly affects consumers who need to report identity theft or request security freezes. The bill amends multiple Tennessee code sections (including Titles 4, 7, 39, and 47) related to private data protection to align with federal electronic filing standards. The key mechanism replaces restrictive language with flexible electronic submission options through authorized federal channels. This simplifies the process for consumers while maintaining compliance with federal guidelines.

Topics ✓ TechnologySupports TechnologyAllows electronic identity theft complaints via FTC/AG-approved methods, enhancing digital access for data privacy reporting under consumer protection.90% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

failed · Tennessee · Senate Mar 10, 2026

SB 2616: Consumer Protection - As introduced, increases, from 60 to 65 days, the time that a controller has after receipt of an appeal from a consumer regarding the controller's refusal to take action on a consumer request under the Tennessee Information Protection Act to inform the consumer in writing of action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. - Amends TCA Title 4; Title 39 and Title 47.

SB 2616 extends the response time for businesses (referred to as "controllers") under Tennessee's Information Protection Act. It increases the deadline from 60 to 65 days for businesses to provide written responses to consumers who appeal a denied request for personal data. The bill requires businesses to explain their decision in writing within this extended timeframe. This change directly affects consumers filing appeals and the businesses responsible for handling those requests.

Topics ✓ TechnologySupports TechnologyExtends response time and mandates written explanations for data request appeals, strengthening consumer data privacy protections under Tennessee's Information Protection Act.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Tennessee · House Mar 18, 2026

HB 2057: Internet and e-Commerce - As introduced, requires that if an account holder deletes the account holder's account on a social media platform, the social media platform shall delete all personal information pertaining to the deleted account or collected directly through the use of the social media platform through the deleted account by the account holder or another user. - Amends TCA Title 4 and Title 47, Chapter 18.

HB 2057 requires Tennessee social media platforms to delete all personal information linked to a user's account when that account is deleted. This applies to data collected directly through the account by the account holder or other users, but excludes de-identified data and publicly available information. The law preserves existing data deletion rules under Tennessee's Information Protection Act (TIPA) for users who don't delete accounts, and allows lawsuits for violations with potential damages, attorney fees, and injunctions. The bill takes effect January 1, 2027, impacting both social media companies operating in Tennessee and their users who delete accounts.

Topics ✓ TechnologySupports TechnologyRequires social media platforms to delete personal data upon account deletion, strengthening user data privacy protections under TIPA.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track

died · Tennessee · House Mar 11, 2026

HB 1831: Public Records - As introduced, creates an offense for using or selling an individual's personal identifying information obtained from a governmental entity for commercial use, punishable as a Class B misdemeanor. -

HB 1831 prohibits using or selling personal information (like home/work addresses, phone numbers, or Social Security numbers) obtained from Tennessee government records for business purposes. It requires individuals requesting such records to sign an affidavit promising not to commercialize the data. Violating this rule is a Class B misdemeanor punishable by a $500 fine per person affected. The law does not apply if an individual explicitly authorizes the commercial use of their information.

Topics ✓ TechnologySupports TechnologyProhibits commercial use of government-held personal data, strengthening data privacy protections under technology policy framework.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

signed · Tennessee · Senate May 27, 2026

SB 1700: Consumer Protection - As enacted, requires the Tennessee advisory commission on intergovernmental relations (TACIR) to conduct a study of the potential regulation of artificial intelligence systems and generative artificial intelligence chatbots in this state. - Amends TCA Title 29; Title 37 and Title 47.

SB 1700, the "Curbing Harmful AI Technology (CHAT) Act," regulates companion chatbots that interact with minors under 18 in Tennessee. It requires operators to prevent chatbots from encouraging self-harm, violence, illegal activity, or secrecy, and mandates clear disclaimers that the user is not interacting with a human (at login, every 30 minutes, and when seeking regulated advice). Developers must also include mental health crisis referrals for users expressing suicidal ideation. The law directly affects companies developing or deploying companion chatbots targeting minors, excluding those used for customer service, internal business, or clinical settings under professional supervision.

Topics ✓ HealthcareSupports HealthcareRequires mental health crisis referrals for suicidal ideation, directly supporting mental health services under healthcare policy.90% confidence ✓ TechnologySupports TechnologyRegulates AI chatbots interacting with minors to prevent harm, requiring disclaimers and mental health referrals, aligning with consumer protection regulations for digital safety.95% confidence

Sub-Topics Mental Health Artificial Intelligence Consumer Data Protection

passed · Tennessee · Senate Mar 12, 2026

SB 1799: Internet and e-Commerce - As introduced, requires that if an account holder deletes the account holder's account on a social media platform, the social media platform shall delete all personal information pertaining to the deleted account or collected directly through the use of the social media platform through the deleted account by the account holder or another user. - Amends TCA Title 4 and Title 47, Chapter 18.

Tennessee's SB 1799 requires social media platforms (like Facebook or Instagram) to delete all personal information linked to an account when the account holder deletes their account. This applies to data collected directly through the platform by the account holder or other users, excluding publicly available information or de-identified data. The law creates a private right to sue platforms that fail to comply, allowing for damages, penalties, and attorney fees. It takes effect January 1, 2027, and excludes email services, cloud storage, payment platforms, and other non-social media services from its scope.

Topics ✓ TechnologySupports TechnologyRequires deletion of personal data upon account deletion, strengthening user privacy protections with private right to sue for non-compliance.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track

in committee · Tennessee · House Mar 4, 2026

HB 2052: Consumer Protection - As introduced, requires certain food retail establishments to use a nondigital presentation of price; prohibits a food retail establishment from using personalized algorithmic pricing; makes other changes related to food retail establishments. - Amends TCA Title 47 and Title 53.

HB 2052 requires large food retail stores (over 15,000 sq ft or over 85,000 sq ft with 10% food sales) to use physical price displays like stickers or signs instead of digital electronic shelves. It prohibits personalized algorithmic pricing that uses consumer data - such as protected class information (e.g., age, race, gender) or behavior-tracking data - to set different prices for individual shoppers. The bill defines "surveillance pricing" as using electronic surveillance (e.g., cameras, sensors) to customize prices based on personal attributes. These changes directly affect major grocery chains and food retailers operating in Tennessee, aiming to prevent data-driven price discrimination.

Topics ✓ TechnologySupports TechnologyProhibits algorithmic pricing using consumer data (e.g., protected classes), directly protecting data privacy in commercial tech use.95% confidence

Sub-Topics Consumer Data Protection

Track

in committee · Tennessee · Senate Feb 5, 2026

SB 2100: Consumer Protection - As introduced, requires certain data controllers to annually register with the consumer protection division of the office of the attorney general and reporter; requires the division to create and maintain a website and accessible deletion mechanism that a consumer can use at no cost to make a single deletion request that is binding on all controllers registered with the division; makes other related changes to the Tennessee Information Protection Act. - Amends TCA Title 47, Chapter 18, Part 33.

SB 2100 requires businesses that collect personal information for commercial purposes (like selling or sharing data) to annually register with Tennessee's Attorney General's Consumer Protection Division. The bill mandates the division to create a free, accessible website where Tennessee consumers can submit a single deletion request to remove their personal information from all registered businesses at once, without needing to contact each company individually. The system must be secure, work for people with disabilities, and allow consumers to modify or verify requests, with businesses required to process deletions within 45 days or treat unverified requests as opt-outs for data sales. Non-compliant businesses face civil penalties under Tennessee's data protection law.

Topics ✓ TechnologySupports TechnologyMandates data controller registration and creates a centralized, free deletion tool for consumers, strengthening data privacy protections under Tennessee's consumer protection framework.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track