HomeLegal DirectoryRI Privacy Law (RIDTPPA)

In effect Limited protection

Rhode Island Data Transparency and Privacy Protection Act

Rhode Island · R.I. Gen. Laws § 6-48.1 (2024)

Rhode Island residents can access, correct, delete, and port their data, and opt out of targeted advertising, data sales, and profiling. The Attorney General enforces with fines up to $10,000 per violation and — unusually — no cure period.

Technical detail

R.I. Gen. Laws § 6-48.1 et seq. (signed June 29, 2024, eff. Jan. 1, 2026); 35,000-consumer or 10,000/20%-revenue thresholds; profiling opt-out; data protection assessments; AG enforcement, no cure period.

Who is protected: Rhode Island residents

Who must comply: Controllers/processors meeting thresholds

Key facts

JurisdictionRhode Island
LevelState
StatusIn effect
Protection strengthLimited protection
Effective date2026-01-01
Enacted2024-06-29
CitationR.I. Gen. Laws § 6-48.1 (2024)
Enforced byRhode Island Attorney General
Private right of actionNo — agency enforcement only
PenaltiesUp to $10,000 per violation; no right to cure
Topicsconsumer data privacy · automated decision-making · consumer protection · data retention
Last verified2026-06-12
Official sourceRIDTPPA — RI Legislature Official Statutes ↗

More AI rules in Rhode Island

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.