Tennessee 2025-2026 Regular Session

Tennessee House Bill HB0630 Compare Versions

Only one version of the bill is available at this time.
OldNewDifferences
11
22 <BillNo> <Sponsor>
33
44 HOUSE BILL 630
55 By Clemmons
66
77
88 HB0630
99 001991
1010 - 1 -
1111
1212 AN ACT to amend Tennessee Code Annotated, Title 47,
1313 Chapter 18, relative to consumer data.
1414
1515 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF TENNESSEE:
1616 SECTION 1. Tennessee Code Annotated, Section 47-18-3304, is amended by adding
1717 the following new subsection:
1818 (d)
1919 (1) A consumer may designate another person to serve as the
2020 consumer's authorized agent and act on the consumer's behalf to opt out of the
2121 processing of the consumer's personal data under subdivisions (a)(2)(E)(i)-(iii).
2222 The consumer may designate an authorized agent using a technology, including
2323 a link to an internet website, an internet browser setting or extension, or a global
2424 setting on an electronic device, that allows the consumer to indicate the
2525 consumer's intent to opt out of such processing.
2626 (2) A controller shall comply with an opt-out request received from an
2727 authorized agent under this subsection (d) if the controller is able to verify, with
2828 commercially reasonable effort, the identity of the consumer and the authorized
2929 agent's authority to act on the consumer's behalf.
3030 (3) Opt-out methods must:
3131 (A) Provide a clear and conspicuous link on the controller's
3232 internet website to an internet web page that enables a consumer, or a
3333 consumer's authorized agent, to opt out of the targeted advertising or sale
3434 of the consumer's personal data; and
3535
3636
3737 - 2 - 001991
3838
3939 (B) On or before January 1, 2026, allow a consumer to opt out of
4040 any processing of the consumer's personal data for the purposes of
4141 targeted advertising, or any sale of such personal data through an opt-out
4242 preference signal sent with the consumer's consent, to the controller by a
4343 platform, technology, or mechanism that:
4444 (i) Must not unfairly disadvantage another controller;
4545 (ii) Must not make use of a default setting, but must
4646 require the consumer to make an affirmative, freely given, and
4747 unambiguous choice to indicate the consumer's intent to opt out of
4848 any processing of a consumer's personal data;
4949 (iii) Must be consumer-friendly and easy to use by the
5050 average consumer;
5151 (iv) Must be consistent with any federal or state law or
5252 rule; and
5353 (v) Must allow the controller to accurately determine
5454 whether the consumer is a resident of this state and whether the
5555 consumer has made a legitimate request to opt out of any sale of
5656 a consumer's personal data or targeted advertising.
5757 (4)
5858 (A) If a consumer's decision to opt out of any processing of the
5959 consumer's personal data for the purposes of targeted advertising, or any
6060 sale of personal data, through an opt-out preference signal sent in
6161 accordance with subdivision (d)(3) conflicts with the consumer's existing
6262 controller-specific privacy setting or voluntary participation in a controller's
6363 bona fide loyalty, rewards, premium features, discounts, or club card
6464
6565
6666 - 3 - 001991
6767
6868 program, then the controller shall comply with the consumer's opt-out
6969 preference signal but may notify the consumer of the conflict and provide
7070 the choice to confirm controller-specific privacy settings or participation in
7171 such a program.
7272 (B) If a controller responds to consumer opt-out requests received
7373 in accordance with subdivision (d)(3) by informing the consumer of a
7474 charge for the use of any product or service, then the controller shall
7575 present the terms of any financial incentive offered pursuant to
7676 subdivision (d)(3) for the retention, use, sale, or sharing of the consumer's
7777 personal data.
7878 SECTION 2. This act takes effect July 1, 2025, the public welfare requiring it.