{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","Global Data Privacy Guide"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"Bass, Berry & Sims PLC"]
[]
[]
[]
["Global Data Privacy Guide"]
[]
["Report Generated: 5/1/2025"]
[]
["View your report results on next tab"]

{"sheet":"Global Data Privacy Guide","index":1,"n_rows":16,"n_cols":2,"rows_kept":16,"cut":false,"hidden":false,"merged":[]}
["Question","USA, Tennessee"]
["Key Legislation Overview"]
["What is the key legislation?","Tennessee’s \nIdentity Theft Deterrence Act (\nTenn. Code Ann. §§ 47-18-2101 to 47-18-2111) (“\nAct”) governs the obligations of an Information Holder (as defined below) to disclose any Breach of System Security following discovery or notification of the breach by an Unauthorized Person.\n"]
["Key Data Protection Provisions"]
["What data is protected?","The \nAct protects Personal Information.\n"]
["Who is subject to privacy obligations?","“Information Holder” means any person or business that conducts business in the State of Tennessee, or any agency of the State of Tennessee or any of its political subdivisions, that owns or licenses computerized data that includes Personal Information of residents of Tennessee. \nTenn. Code Ann. § 47-18-2107(a)(3)."]
["What are the principles applicable to personal data processing?","N/A\n"]
["How is the processing of personal data regulated?","A Tennessee consumer may place a security freeze on the consumer report of such consumer by making a request in writing by certified mail or by an electronic means provided by the credit reporting agency. \n§ 47-18-2108(a)."]
["How are storage, security and retention of personal data regulated?","N/A\n"]
["What are the data subjects' rights?","N/A\n"]
["Are there restrictions on cross-border data transfers?","N/A\n"]
["Are there any notification requirements for data breaches?","Information Holders are required under the \nAct to notify affected individuals following any Breach of the System Security, subject to certain exceptions.\n"]
["Who is the privacy regulator?","The Attorney General of the State of Tennessee (the “\nAttorney General”) may bring an action in the name of the State of Tennessee.\n"]
["What are the consequences of a privacy breach?","The Attorney General may enforce and seek civil penalties for violations of the \nAct.\nThe Attorney General may also seek a temporary restraining order, a temporary injunction, or permanent injunction against the use of an act or practice that the Attorney General believes violates the \nAct. \nTenn. Code Ann. § 47-18-2105(a)(1).An individual or business entity affected by a Breach of the System Security may initiate a private right of action for a violation of the \nAct. Tenn. Code Ann. § 47-18-2104."]
["How is electronic marketing regulated?","N/A\n"]
["Are there any recent developments or expected reforms?","N/A\n"]