What is the data breach notification deadline in Tennessee?

Tennessee requires notice to affected individuals 45 calendar days from discovery (Tenn. Code §§47-18-2105–2107).

Do you have to notify the Tennessee Attorney General of a data breach?

Tennessee does not require attorney-general notice for private-entity breaches.

← All jurisdictions

TN · data breach notification

Tennessee

high

Tenn. Code §§47-18-2105–2107

Individual deadline

45 days

Trigger standard

Any breach

AG / regulator

Not required

Notice to individuals	45 calendar days from discovery
Risk-of-harm standard	None, notice required on any qualifying breach of covered personal information.
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	Not required for private-entity breaches.
Credit reporting agencies	Notify CRAs above 1,000 residents.
Substitute notice	Typically available above $250,000 cost / 500,000 affected (verify).
Private right of action	Yes.

Rule last verified July 18, 2026 · confidence high. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a Tennessee breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →