Privacy Map

Rhode Island. Comprehensive data protection. Act

RIDTPPARhode Island Data Transparency and Privacy Protection Act (R.I. Gen. Laws § 6-48.1)

In force
Partly verifiedMedium confidence. Became law without the Governor's signature.

§1Summary

Synopsis

Comprehensive law with standard rights and opt-outs, plus a requirement that commercial websites disclose all third parties to which they sell or may sell data.

Key themes
  • consumer rights (access, deletion, correction, portability)
  • opt-out of sale, targeted advertising and profiling
  • sensitive data consent
  • data protection assessments
  • processor contracts
  • third-party sale disclosures
Unique features

No cure period; website disclosure duties apply to commercial sites regardless of thresholds.

SaaS relevance

Applies at 35,000 Rhode Island consumers, or 10,000 with over 20% revenue from sales.

§2Obligations

Extraterritorial
Yes
Breach notification
See R.I. Gen. Laws § 11-49.3 (separate statute)
DPO
No
Cross-border transfers
None
Maximum penalty
Up to $10,000 per violation

§3Dates

Key dates
  • Adopted
  • In force

§4Text and authority

Text
Authority
Rhode Island Attorney General

§5Where it applies

Domestic law of
Rhode Island

§6Sources and verification

Verification

Medium confidence.

Partly verifiedMedium confidence. Became law without the Governor's signature.