This year, Tennessee joined 13 other US state data privacy laws by taking an important step towards safeguarding digital rights. The Tennessee Information Protection Act, passed in May 2023, enshrines consumer data privacy rights into state law and places new responsibilities on data controllers. Like the other US states that have passed data privacy laws recently, Tennessee’s legislation can be seen as a response to the lack of a comprehensive federal data protection regulation.