SB 555 requires healthcare providers, clinics, facilities, and related entities in Tennessee to notify all health insurance companies they work with "as soon as practicable" if they experience a cyber-attack. This applies to any organization that contracts with insurers for patient care billing. The law mandates immediate notification to help insurers protect patient data and maintain billing systems during security incidents. It amends Tennessee health insurance codes (Titles 33, 56, 63, 68, and 71) to implement this requirement. The bill focuses solely on triggering timely communication about cyber incidents, not on preventing attacks or altering insurance coverage.
HB 933 requires Tennessee's Department of Education to create a three-year pilot program (2025-2028) funding AI-powered weapons detection systems for specific schools. It targets school districts that are designated as "priority schools" under state accountability rules or experienced gun violence on school grounds in 2024-2025, excluding the Achievement School District. The program provides grants for purchasing systems capable of detecting weapons like knives and firearms, automatically alerting school staff and law enforcement upon detection. Schools without such systems receive priority, with annual reports required to the legislature on program participation and system deployment.
SB 228, the "LESTER Act," requires Tennessee law enforcement to accept digital copies of vehicle registration as valid proof of registration, directly affecting drivers who use digital registration and police officers during traffic stops. It amends Tennessee law to clarify that displaying a digital registration does not grant officers permission to access other contents of a driver's electronic device. The bill also updates terminology from "motor-propelled vehicle" to "motor vehicle" in relevant sections. The law takes effect July 1, 2025.
HB 1246 requires Tennessee's Attorney General's office to report on investigations into consumer protection violations (like scams or unfair business practices) where artificial intelligence was used to commit those violations. The report must cover cases from January 2024 through December 2025 and be submitted to specific legislative committee chairs by July 1, 2026. This bill does not change consumer protection laws but mandates data collection on AI's role in enforcement. The report may be submitted electronically, and the bill amends multiple Tennessee Code sections to reflect this requirement.
SB 814 creates a three-year grant pilot program (2025-2026 through 2027-2028) for Tennessee school districts meeting specific criteria. Eligible districts - those identified as priority schools under state accountability rules or experiencing student fatalities from gun violence on campus - can receive grants to purchase AI-powered weapons detection systems that identify knives and firearms and immediately alert law enforcement. The program requires all systems to notify authorities upon detection and mandates annual reporting to the legislature on grant distribution and system coverage. Funds must be fully allocated each year to eligible districts, with unused funds redirected toward other approved security measures if all target schools are covered. The pilot ends July 31, 2028.
HB 511 requires healthcare providers, clinics, facilities, and other entities that contract with health insurance companies for patient care reimbursement to notify those insurers "as soon as practicable" if they experience a cyber-attack. This applies to all Tennessee entities billing insurers for healthcare services, directly affecting providers and insurers. The key provision mandates timely notification to help insurers protect patient data and manage claims during incidents. The bill amends Tennessee insurance and health codes (Titles 33, 56, 63, 68, and 71) to establish this requirement.
SB 404 amends Tennessee law to expand the crime of unlawful exposure to include distributing digitally altered intimate images created or modified using AI, editing software, or other digital tools - with the intent to cause emotional distress. It directly affects identifiable individuals whose private images are manipulated and shared without consent. The law specifically targets images of intimate body parts or sexually explicit conduct that were altered via technology, making such distribution a criminal offense. The bill takes effect July 1, 2025, and applies to images created or modified using digital tools, not just original photographs.
HB 549, if passed, would create the "Tennessee Critical Infrastructure Protection Act" to restrict foreign adversaries from accessing Tennessee's critical infrastructure. The bill prohibits companies and government entities from contracting with foreign adversaries (countries listed under 15 CFR 791.4) for critical infrastructure projects that would allow remote access or control of systems like power grids, water supplies, telecom networks, or transportation systems. Exceptions are permitted only if no reasonable alternatives exist, the contract is pre-approved by the Department of Finance and Administration, and the risk of not contracting outweighs the security threat. Companies must also register with the Department of Commerce and Insurance, conduct background checks on employees with infrastructure access, and ban foreign nationals from adversary nations from such roles.
