Rhode Island Data Transparency and Privacy Protection Act
Enacted in force
Jurisdiction
Rhode Island [source]
Applies to
Main controller duties: for-profit businesses targeting/doing business in Rhode Island, 35,000+ customers excluding payment-only processing, or 10,000+ AND >20% gross revenue from sales. Separate §3 commercial website/service disclosures have no numerical threshold and concern collecting, storing and selling PII within the provision's scope. [source]
Penalty
Unverified
Detail review
Accepted record facts reviewed
Nov 13, 2026
In plain English
- Main controller duties: for-profit businesses targeting/doing business in Rhode Island, 35,000+ customers excluding payment-only processing, or 10,000+ AND >20% gross revenue from sales. Primary source
- Separate §3 commercial website/service disclosures have no numerical threshold and concern collecting, storing and selling PII within the provision's scope. Primary source
- Covered commercial websites/services collecting, storing and selling personally identifiable information provide the separate §3 disclosures; the main controller thresholds differ. Primary source
Dates and phased obligations
January 1, 2026 Primary source
· effective
January 1, 2026 Primary source
Questions from this record
Who does RI 6-48.1 cover?
Main controller duties: for-profit businesses targeting/doing business in Rhode Island, 35,000+ customers excluding payment-only processing, or 10,000+ AND >20% gross revenue from sales. Separate §3 commercial website/service disclosures have no numerical threshold and concern collecting, storing and selling PII within the provision's scope. Primary source
What is the law’s status?
Enacted / in force Primary source
What date does this record track?
January 1, 2026 Primary source
Has this record been verified?
This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source
Primary sources
Verification history
Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.
Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix