Summer Privacy Reset: Catch Up, Clean Up, Comply

The U.S. privacy landscape continues to evolve, with new laws being enacted or coming into effect, existing laws being amended or updated, and state regulators building up their privacy enforcement capacity. Below are some significant U.S. privacy developments to consider as 2025 reaches the halfway mark.

Tennessee and Minnesota Privacy Laws Come Into Force

With the Tennessee Information Protection Act (TIPA) effective as of July 1, 2025, and the Minnesota Consumer Data Privacy Act (MCDPA) going into effect on July 31, businesses face new privacy requirements including, but not limited to, the following:

• NIST Framework Compliance — The TIPA requires companies to maintain and comply with a written privacy program that reasonably conforms to the National Institute of Standards and Technology (NIST) privacy framework.