Tennessee Code Title 47. Commercial Instruments and Transactions § 47-18-4903

(1) Protected health information that is collected by a covered entity or business associate as those terms are defined in 45 CFR Parts 160 and 164;

(2) A public or private institution of higher education;

(3) An entity owned or operated by a public or private institution of higher education;

(4) Biomedical or academic research conducted by a research hospital, academic medical center, or other entity affiliated with such hospital or medical center that is not a direct-to-consumer genetic testing company;

(5) Genetic data that is shared with or by a research hospital, academic medical center, or other entity affiliated with such hospital or medical center that is not a direct-to-consumer genetic testing company for the purposes of biomedical or academic research or to find causes of or cures for a disease or medical condition; or

(6) The sharing of genetic data that does not require consent pursuant to the Federal Policy for the Protection of Human Subjects, as described in 45 CFR Part 46.