TN HB0630

Consumers may designate authorized agents to opt out of personal data processing on their behalf using technologies such as browser settings, extensions, or global device settings

Controllers must honor opt-out requests from authorized agents if they can verify the consumer's identity and the agent's authority with commercially reasonable effort

By January 1, 2026, controllers must accept opt-out preference signals for targeted advertising and data sales, provided the signal requires affirmative consumer choice (not default settings) and allows verification of Tennessee residency

When opt-out signals conflict with existing loyalty programs or controller-specific privacy settings, controllers must honor the opt-out but may notify consumers and offer a choice to confirm their participation

Effective date: July 1, 2025