Tennessee Information Protection Act, de-identified data duties (Tenn. Code Ann. 47-18-3207(a) (2023 Pub. Ch. 408))
Tennessee imposes the three de-identification duties on the holder rather than in the definition.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“The controller in possession of de-identified data shall: (1) Take reasonable measures to ensure that the data cannot be associated with a natural person; (2) Publicly commit to maintaining and using de-identified data without attempting to reidentify the data; and (3) Contractually obligate recipients of the de-identified data to comply with this part.”
Where it was read
Also read from the same source
- Tennessee Information Protection Act, definitions (sale of personal information) (Tenn. Code Ann. 47-18-3201(25) (2023 Pub. Ch. 408))
- Tennessee Information Protection Act, controller duties (sensitive data consent) (Tenn. Code Ann. 47-18-3204 (2023 Pub. Ch. 408))
- Tennessee Information Protection Act, effective date (2023 Pub. Ch. 408, sec. 6) (2023 Tenn. Pub. Acts ch. 408, sec. 6)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide