> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tennessee Information Protection Act

> Comply with Tennessee's consumer data privacy law.

> Comply with Tennessee's consumer data privacy law.

The Tennessee Information Protection Act (TIPA) is a US state consumer privacy law that grants Tennessee residents rights over their personal information and imposes obligations on businesses that process it. TIPA notably references the NIST Privacy Framework as an affirmative defense.

<Note>
  TIPA applies to businesses meeting certain revenue and data-processing thresholds that handle the personal data of Tennessee residents.
</Note>

## Who needs Tennessee Information Protection Act?

<CardGroup cols={2}>
  <Card title="Businesses serving Tennessee" icon="flag">
    Companies processing personal data of Tennessee residents above defined thresholds.
  </Card>

  <Card title="Multi-state operators" icon="globe">
    Organizations building a US state privacy program across multiple jurisdictions.
  </Card>
</CardGroup>

## Key components

<CardGroup cols={3}>
  <Card title="Consumer rights" icon="user-shield">
    Access, correction, deletion, portability, and opt-out rights.
  </Card>

  <Card title="Privacy notices" icon="file-lines">
    Clear disclosures about data collection and processing.
  </Card>

  <Card title="NIST alignment" icon="shield-check">
    Maintaining a NIST Privacy Framework-aligned program offers an affirmative defense.
  </Card>

  <Card title="Data protection assessments" icon="clipboard-check">
    Assessments for higher-risk processing activities.
  </Card>
</CardGroup>

## How DSALTA helps with Tennessee Information Protection Act

<Steps>
  <Step title="Activate TIPA">
    Select the Tennessee Information Protection Act from the Frameworks page. DSALTA maps requirements to controls.
  </Step>

  <Step title="Review privacy controls">
    Review consumer rights and assessment controls and assign owners.
  </Step>

  <Step title="Collect evidence automatically">
    Connect integrations to maintain privacy evidence.
  </Step>

  <Step title="Approve privacy policies">
    Review and approve Tennessee-specific privacy notices.
  </Step>

  <Step title="Maintain accountability">
    Track data protection assessments and rights requests.
  </Step>
</Steps>

## Frequently asked questions

<AccordionGroup>
  <Accordion title="What makes TIPA unique?" icon="star">
    TIPA is notable for offering an affirmative defense to businesses that maintain a privacy program conforming to the NIST Privacy Framework.
  </Accordion>

  <Accordion title="Who must comply?" icon="circle-question">
    Businesses meeting revenue and data-volume thresholds that process personal data of Tennessee residents.
  </Accordion>
</AccordionGroup>

## Related pages

* [Active Frameworks](/guides/compliance/frameworks-active)
* [Available Frameworks](/guides/compliance/frameworks-available)
* [Controls](/guides/compliance/controls)
* [Audits](/guides/compliance/audits)