RI Privacy Law (RIDTPPA)

Rhode Island Data Transparency and Privacy Protection Act
Rhode Island · R.I. Gen. Laws § 6-48.1 (2024)

Status
In effect
Took effect
January 1, 2026
Applies to
Controllers/processors meeting thresholds
Enforced by
Rhode Island Attorney General

Rhode Island residents can access, correct, delete, and port their data, and opt out of targeted advertising, data sales, and profiling. The Attorney General enforces with fines up to $10,000 per violation and — unusually — no cure period.

Who is protected: Rhode Island residents

Legal detail

R.I. Gen. Laws § 6-48.1 et seq. (signed June 29, 2024, eff. Jan. 1, 2026); 35,000-consumer or 10,000/20%-revenue thresholds; profiling opt-out; data protection assessments; AG enforcement, no cure period.

Key facts

JurisdictionRhode Island
LevelState
StrengthLimited
EnactedJune 29, 2024
CitationR.I. Gen. Laws § 6-48.1 (2024)
Private right of actionNo, agency enforcement only
PenaltiesUp to $10,000 per violation; no right to cure
Topicsconsumer data privacy · automated decision-making · consumer protection · data retention
StatuteRIDTPPA — RI Legislature Official Statutes

More AI rules in Rhode Island

Related consumer data privacy rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.