Rhode Island Privacy Compliance Checklist

Rhode Island Data Transparency and Privacy Protection Act — Step-by-step guide to compliance

Compliance Steps

Effective: January 1, 2026

1
Assess applicability — note the lower thresholds of 35,000 consumers or 10,000+ with 20% revenue from data sales
2
Update privacy notices with all RIDTPPA-required disclosures
3
Implement consumer rights request mechanisms with 45-day response period
4
Obtain opt-in consent for processing sensitive personal data
5
Implement opt-out mechanisms for data sales, targeted advertising, and profiling
6
Establish an appeals process for denied consumer requests
7
Prioritize compliance readiness — there is no cure period to correct violations after AG notification

Key Enforcement Details

Enforced By

Rhode Island Attorney General

Penalty / Violation

$10,000

Cure Period

None

Private Right of Action

Disclaimer: PrivacyLawMap provides general information about US state privacy laws for educational purposes only. This is NOT legal advice. Privacy laws are complex and frequently amended. Consult with a qualified privacy attorney for advice specific to your business. PrivacyLawMap makes no warranties about the accuracy or completeness of this information.