Tennessee residents can:
✅ Access their personal data held by a business.
✅ Correct inaccurate data.
✅ Delete their data (with some exceptions).
✅ Opt out of: Sale of personal data; Targeted advertising; Profiling for significant decisionsHow do consumers submit data requests? Businesses must provide at least two methods (e.g., webform, toll-free number, email) for consumers to exercise their rights.

Certain entities are exempt, including:
- Government agencies
- NonprofitsHigher education institutions
- HIPAA-covered entities (healthcare providers)
- Financial institutions under GLBA
- Businesses already complying with COPPA (Children’s Online Privacy Protection Act).

Data Mapping – Identify what personal data you collect.
‍Update Privacy Policies – Disclose practices per TIPA.
‍Implement Request Mechanisms – Allow consumers to access/delete data.
‍Train Staff – Ensure employees understand compliance.
‍Conduct Risk Assessments – For high-risk processing.
‍
Shopify merchants can streamline compliance by leveraging tools like Consentmo, which offers automated solutions for managing cookie consent, generating privacy notices, and processing data subject requests.