Amends TCA Title 20; Title 29 and Title 47, Chapter 18.
Tennessee SB1421 requires businesses that handle personal information, personal health information, or restricted information to establish and maintain a written cybersecurity program with specific safeguards to protect against data breaches. The bill provides an affirmative defense to these businesses in tort actions related to data breaches, provided they comply with industry-recognized cybersecurity frameworks and take appropriate actions in response to known threats. Additionally, the bill specifies that it does not create a private right of action for individuals affected by breaches.
Tennessee SB1421 requires businesses that handle personal information, personal health information, or restricted information to establish and maintain a written cybersecurity program with specific safeguards to protect against data breaches. The bill provides an affirmative defense to these businesses in tort actions related to data breaches, provided they comply with industry-recognized cybersecurity frameworks and take appropriate actions in response to known threats. Additionally, the bill specifies that it does not create a private right of action for individuals affected by breaches.
Track Tennessee Legislation Like a Pro
Join hundreds of professionals using LegisGo to stay ahead of legislative changes.
Instant Alerts
Get notified when bills you track move through the legislature
AI Summaries
Understand complex legislation in seconds with AI-powered analysis
Full Access
All 132 legislators, committee schedules, and voting records
Akbari, Raumesh
114th General Assembly
February 6, 2025
March 9, 2026
Assigned to General Subcommittee of Senate Judiciary Committee