Lexology July 17, 2024
With the Rhode Island Data Transparency and Privacy Protection Act (the “Act”), Rhode Island is the latest state to pass a comprehensive privacy law and join the evolving U.S. privacy landscape. The Act will take effect on January 1, 2026, the same date as the Indiana and Kentucky privacy laws.
Applicability and Scope
The Act differentiates itself from other state privacy laws with its unique notice obligations. Any commercial website or internet service provider that conducts business in the state or with Rhode Island customers or is otherwise subject to Rhode Island jurisdiction must designate a controller, and if the business collects, stores and sells customers’ personally identifiable information, then the controller must conspicuously disclose via a privacy policy or...