TIPA · Effective 2025-07-01

Tennessee Data Removal Guide (2026)

Tennessee's Information Protection Act took effect July 2025. TIPA is distinctive for offering an affirmative defense to controllers who adopt the NIST Privacy Framework — a compliance incentive not found in peer state laws.

At a glance

Comprehensive state privacy law
Yes — TIPA
Broker response deadline
45 days from verifiable request
Enforcement
Tennessee Attorney General — Consumer Protection
Residents
7.1M (approx.)

Tennessee Information Protection Act (TIPA)

TIPA applies to controllers with $25M+ in revenue who process data of 175,000+ Tennessee consumers (or 25,000+ while selling data). Rights include delete, access, correct, port, and opt-out. The unique NIST Privacy Framework safe harbor lets compliant controllers raise it as an affirmative defense. Enforcement is exclusive to the AG with a 60-day cure period and civil penalties up to $7,500 per violation, trebled for willful acts.

Your rights

  • Delete, access, correct, port, opt-out
  • NIST Privacy Framework safe harbor defense
  • AG enforcement up to $22,500/violation for willful acts

Where your data leaks from in Tennessee

Data brokers don\u2019t guess your address \u2014 they scrape specific public-record sources. The ones most relevant in Tennessee:

  • Davidson, Shelby, Knox County property records
  • Tennessee Administrative Office of the Courts public search
  • Tennessee DOS driver records

Ready to remove

Opt out of 200+ brokers for $2

OfflistMe drafts a legally compliant deletion email citing TIPA for every broker. You send from your own inbox. No account, no ID upload.

Start for $2 \u2192

If a broker ignores your request

If a broker does not respond within 45 days, file a complaint with the Tennessee Attorney General — Consumer Protection. The enforcement authority can assess civil penalties and compel compliance.

File a complaint with Tennessee Attorney General — Consumer Protection \u2197

FAQ: Tennessee data removal

What is the NIST Privacy Framework safe harbor?+

Tennessee controllers who document adherence to the NIST Privacy Framework (NIST PF) get an affirmative defense to TIPA claims. It does not prevent lawsuits but creates a rebuttable presumption of reasonable compliance. For consumers, it means some sophisticated brokers may claim the defense; the AG can still proceed with enforcement.

Related resources

Other state guides