Duty LXD-1132

Processes de-identified data, in Tennessee

1 law 4 lines Entry current, revision 1 of 10 November 2026 About this activity

Tennessee Information Protection Act (TIPA), de-identified datasince 1 Jul 20254 lines

Tenn. Code Ann. § 47-18-3207 · Read the law's page

If you are a controller in possession of de-identified data, take reasonable measures to ensure that the data cannot be associated with a natural person (Tenn. Code Ann. § 47-18-3207(a)(1)).
Publicly commit to maintaining and using the de-identified data without attempting to reidentify it (Tenn. Code Ann. § 47-18-3207(a)(2)).
Contractually obligate recipients of the de-identified data to comply with the Act (Tenn. Code Ann. § 47-18-3207(a)(3)).
If you disclose pseudonymous data or de-identified data, exercise reasonable oversight to monitor compliance with the contractual commitments the data is subject to, and take appropriate steps to address breaches of those commitments (Tenn. Code Ann. § 47-18-3207(d)).

Revisions

An entry gets a new revision when a law in it is added, removed, amended or reworded in the law library. The ID stays the same.