Tennessee: AI health laws

2 entries on the map: 2 in force.

Payer and utilization review AI

Insurers', benefit managers' and utilization reviewers' use of AI, including prior authorization and claim denials.

Nothing in this category was found in the review of Sept 29, 2026.

Patient disclosure of AI use

Telling patients that AI is used in their care or in messages to them.

Nothing in this category was found in the review of Sept 29, 2026.

Clinical decision and chatbot limits

Limits on AI in clinical decisions and on health chatbots, including AI presenting itself as a licensed professional.

Also relevant here: SB 1580/HB 1470 (Public Chapter 647), An act relative to mental health (AI represented as a qualified mental health professional) (under mental health AI).

Mental health AI

AI in therapy and mental health care.

In forceLaw

SB 1580/HB 1470 (Public Chapter 647), An act relative to mental health (AI represented as a qualified mental health professional)

In force since Jul 1, 2026 (signed Apr 1, 2026)

Bars a person who develops or deploys an AI system from advertising or representing to the public that the system is, or is able to act as, a qualified mental health professional, and makes a violation an unfair or deceptive act under the Tennessee Consumer Protection Act with a civil penalty of $5,000 per violation.

Physician read. Since July 1, 2026, no person who develops or deploys an AI system in Tennessee, including a practice, may advertise or represent to the public that the system is or can act as a qualified mental health professional, a term Title 33 defines to include psychiatrists, other physicians with expertise in psychiatry and psychologists with health service provider designation, among others. Each violation carries a $5,000 civil penalty under the Consumer Protection Act.

Applies to: Any person who develops or deploys an artificial intelligence system
Also touches: Clinical decision and chatbot limits

Notes: Status, dates and text come from LegiScan's bill page and its copy of the public chapter. LegiScan's history shows the governor signed the bill April 1, 2026 and that it was published as Public Chapter 647 on April 6, 2026; Healthcare Law Insights (secondary) also gives April 1, while Holland & Knight (secondary) gives April 6, the date the chapter number was assigned. The approval day on the chapter copy is not legible. The act adds T.C.A. 33-1-205 and lists a violation as an unfair or deceptive act in T.C.A. 47-18-104(b); it defines artificial intelligence as models and systems capable of performing functions generally associated with human intelligence, including reasoning and learning, and does not otherwise limit licensed professionals' use of AI. The act does not itself define qualified mental health professional; T.C.A. 33-1-101, whose definitions apply throughout Title 33, does (in Justia's unofficial copy of the 2025 code).

Checked against its sources

Data and privacy

Health and consumer data, biometrics, and data used to train AI.

In forceLaw

HB 1181/SB 73 (Public Chapter 408), Tennessee Information Protection Act

In force since Jul 1, 2025 (signed May 11, 2023)

Gives consumers rights to access, correct, delete and port personal information and to opt out of targeted advertising, sale and profiling in furtherance of decisions with legal or similarly significant effects, requires consent before processing sensitive data, including a mental or physical health diagnosis, identifying genetic or biometric data and precise geolocation, and requires data protection assessments for that processing.

Physician read. Since July 1, 2025, a business covered by the act needs a consumer's consent before processing data revealing a mental or physical health diagnosis, identifying genetic or biometric data, or precise geolocation. HIPAA covered entities, business associates and protected health information are exempt, so it places no new duty on a practice covered by HIPAA.

Applies to: Businesses with more than $25 million in revenue that process personal information of at least 175,000 Tennessee consumers in a year, or of at least 25,000 consumers while deriving more than 50% of gross revenue from selling it; HIPAA covered entities, business associates and protected health information are exempt

Notes: Status, dates and text come from LegiScan's bill page and its copy of the public chapter. The Attorney General enforces it exclusively after a 60-day cure notice; civil penalties reach $7,500 per violation, with treble damages for willful or knowing violations, and there is no private right of action. A written privacy program that reasonably conforms to the NIST privacy framework is an affirmative defense.

Checked against its sources

Federal law also applies in every state: see federal law and policy.

Most recently checked Sept 29, 2026. General information, not legal advice. How the map works, and the data.