Rhode Island Data Transparency and Privacy Protection Act

Rhode Island's comprehensive consumer privacy law, effective January 1, 2026. It requires commercial websites and internet service providers that sell customers' personal information to disclose what they collect and to whom they sell it, and gives residents of larger covered businesses rights to access, correct, delete and port their data and to opt out of targeted advertising, sales and significant automated profiling. Covered controllers need opt-in consent for sensitive data (including health, biometric, genetic, precise geolocation and known-child data) and must run data protection assessments for high-risk processing.