A website privacy policy is a legal statement a business places on its website to inform users of what personally identifiable information (PII) the business collects, and how it complies with privacy laws. Privacy laws govern the collection, use, storage, protection, sharing, and deletion of PII—and the disclosure to consumers of what PII a business has collected about them. Examples of PII include names, addresses, telephone numbers, credit card information, and online user names and passwords. Many states have privacy laws, and these laws vary from state to state.
In Tennessee, as in many states, businesses that operate websites and collect personally identifiable information (PII) from their users are expected to have a privacy policy in place. This policy should clearly disclose the types of PII collected, such as names, addresses, telephone numbers, credit card information, and online credentials. The policy must also explain how the business complies with applicable privacy laws regarding the use, storage, protection, sharing, and deletion of PII. Tennessee does not have a specific state law that governs website privacy policies, so businesses in Tennessee must ensure they comply with relevant federal laws such as the Children's Online Privacy Protection Act (COPPA) for the collection of information from children under 13, and the Gramm-Leach-Bliley Act (GLBA) for financial institutions. Additionally, businesses that collect information from residents of other states may need to comply with those states' privacy laws, such as the California Consumer Privacy Act (CCPA) if they serve California residents. It is advisable for businesses to consult with an attorney to ensure their privacy policies are comprehensive and compliant with all applicable laws.