Privacy laws · Rhode Island

Rhode Island Data Transparency and Privacy Protection Act.

Low threshold law with standard privacy rights. Applies to businesses processing data of 35K+ Rhode Island consumers.

/ Diagnostic check ClearConsent scans your storefront for signals related to this law — consent banner state, GPC support, Do Not Sell links, privacy policy disclosures, cookies, and trackers.

/ Effective
2026-01-01
Effective date
When the law took effect or will take effect.
/ Consumers
35,000
Consumer threshold
The number of Rhode Island residents whose data triggers compliance.
/ Revenue
None
Revenue threshold
Annual revenue trigger for compliance, if applicable.
01 / Key requirements

What the law requires.

  • 01Privacy notice
  • 02Right to access, correct, delete personal data
  • 03Right to data portability
  • 04Right to opt-out of sale, targeted advertising, profiling
  • 05Data protection assessments
  • 06Consent for sensitive data
02 / Enforcement

Penalties & cure period.

Penalties

Up to $10,000 per violation.

Cure period

30-day cure period

Enforcement agency

Attorney General

03 / E-commerce

What this means for
your store.

Low threshold (35K consumers). Standard privacy rights.

Scan your store for RIDTPPA privacy gaps →

Run the diagnostic