SB1421 amends Tennessee law to define cybersecurity frameworks for businesses handling personal, health, and restricted information.
SB1421 amends Tennessee Code to establish definitions and requirements for cybersecurity programs for businesses that handle personal, personal health, and restricted information. It mandates that covered entities maintain a cybersecurity program that conforms to industry-recognized frameworks, such as the NIST standards or the HITECH Act. The bill outlines that a covered entity can use such a program as an affirmative defense against tort claims if they are breached.
Included in complete analysis
- Overview
- Core Provisions
- Implementation
- Impact
- Legal Framework
- Critical Issues
See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.