Tennessee Privacy Disclosure

1. Overview of the law

The Tennessee Information Protection Act took effect on July 1, 2025. It applies to businesses that earn at least $25 million in annual revenue and process personal data of at least 175,000 Tennessee residents in a year, or 25,000 residents when more than half of revenue comes from selling personal data. The law is enforced by the Tennessee Attorney General. SIE meets these thresholds and applies the TIPA in full.

2. Your rights

• Right of access. Confirm processing and get a copy of your personal data.
• Right to correct. Fix inaccurate personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to portability. Receive your data in a usable format.
• Right to opt out. Stop targeted advertising, sale of personal data, and certain profiling.
• Right to appeal. Appeal a denial within forty-five days.

3. How SIE complies

We maintain a written privacy program aligned with the NIST Privacy Framework, which gives controllers a safe-harbor defense in Tennessee. We obtain opt-in consent before processing sensitive data, including data revealing race, religion, mental or physical health, sexual orientation, citizenship, genetic or biometric identifiers, precise geolocation, and any data of a known child under thirteen. Tennessee includes a sixty-day cure period after AG notice.

4. Authorized agents

The TIPA does not require us to honor authorized agents. SIE accepts authorized-agent submissions as a courtesy when they include a signed permission letter from you. We may verify the request directly with you before acting.

5. How to submit a request

Or email [email protected] with the subject line "Tennessee TIPA Request".We respond within forty-five days.

6. Effective date and scope

The TIPA took effect on July 1, 2025. The law applies only to controllers meeting both the revenue and consumer thresholds. Personal data processed in a B2B or employment context is out of scope.