Can I skip updating my privacy policy and other CCPA-related documents in Tennessee? What are the requirements?

Requirements for Updating Privacy Policy and Other CCPA-related Documents in Tennessee

In Tennessee, the confidentiality of ORSA-related documents is recognized as proprietary and containing trade secrets ^[1.1]. However, this does not exempt businesses from complying with privacy laws such as the California Consumer Privacy Act (CCPA) if they collect personal information from California residents.

Under the CCPA, businesses that meet certain criteria are required to update their privacy policy and other CCPA-related documents annually . These documents must include information about the personal information collected, the purposes for which it is used, and the categories of third parties with whom it is shared .

Therefore, if your business collects personal information from California residents and meets the criteria under the CCPA, you must update your privacy policy and other CCPA-related documents annually, regardless of the confidentiality of ORSA-related documents in Tennessee.

Source(s):

• [1.1] Confidentiality of ORSA-related documents — Permitted sharing and use.

Jurisdiction

Tennessee

• Privacy