TN SB1799

Social media platforms must delete all personal information pertaining to an account holder when that account holder deletes their account, including data collected through the platform by the user or other users.

"Social media platform" is defined as websites or apps that allow account creation and enable communication through posts, but excludes email services, cloud storage, online shopping sites, career development sites, and peer-to-peer payment platforms.

Individuals may bring civil lawsuits against social media platforms that fail to delete personal information, with courts authorized to issue injunctions and award actual damages, punitive damages, and attorney fees.

The law does not limit obligations under the Tennessee Information Protection Act (TIPA); users who keep accounts but request data deletion remain subject to TIPA requirements.

Effective date is January 1, 2027, applying to conduct occurring on or after that date.