Tennessee AI Legislation in 2026

The Tennessee Picture

Tennessee has chosen a deliberately targeted path on artificial intelligence rather than an omnibus one. There is no comprehensive AI act on the books, and I do not expect one in the near term. Instead, the state has legislated against specific, concrete harms: voice and likeness cloning, nonconsensual intimate deepfakes, AI-generated child sexual abuse material, deceptive AI in mental health, and deepfakes in political advertising. The throughline is identity protection and the integrity of a person's voice, image, and reputation in the generative AI era. That focus is not accidental. It reflects Nashville's economic center of gravity and the political weight of the music and entertainment industries in the state.

The ELVIS Act is the headline and the genuine first-in-nation milestone. By adding a person's voice to the bundle of protected publicity rights, and by reaching the providers of cloning tools rather than only end users, Tennessee modernized a 1984 right-of-publicity statute for the age of AI voice synthesis. It was driven openly by recording artists, songwriters, and labels who saw unauthorized AI voice clones as an existential threat to their livelihoods. For any business that builds or distributes voice or likeness generation technology, this is the most consequential state law in the country to understand, because liability can attach to the tool maker, the protected right survives death, and violations carry criminal exposure as well as civil damages.

For builders and businesses, the practical compliance picture in Tennessee is now layered. If you operate a voice or likeness generation product, you need consent provenance, takedown processes, and guardrails against producing identifiable real people, because the ELVIS Act reaches the technology layer. If you build conversational or wellness products, the 2026 health care AI law means you cannot market or imply that your system functions as a licensed mental health professional, and the private right of action plus per-violation penalties make this a litigation risk, not just a regulatory one. If you operate platforms that can generate or host synthetic intimate imagery, both the deepfake intimate images law and the AI CSAM tools law create serious criminal exposure, including felony classifications for distribution and production.

My recommendation to executives is to treat Tennessee as a harm-specific, enforcement-serious jurisdiction rather than a light-touch one. The combination of criminal penalties, private rights of action, and provider-level liability is unusually aggressive even though there is no single AI statute. Consumer data is governed separately by the Tennessee Information Protection Act, a privacy law effective July 1, 2025, rather than an AI-specific statute. The practical posture for any company operating in Tennessee is to map identity, likeness, and synthetic-media risk first, because that is where the state has built its sharpest teeth.