Bill > H7787

This bill creates the Rhode Island Data Transparency and Privacy Protect Act, which establishes data privacy protections for the personal data of citizens of Rhode Island. The key provisions include: - Requiring commercial websites and internet service providers that collect and sell customers' personal data to disclose what information they collect, who they sell it to, and how customers can contact them. - Applying additional disclosure and opt-out requirements to entities that control or process personal data of at least 35,000 customers or at least 10,000 customers from whom they derive over 20% of revenue from data sales. - Granting customers various rights, such as confirming if their data is being processed, correcting inaccuracies, obtaining copies of their data, and opting out of targeted advertising, data sales, and certain automated decision-making. - Establishing responsibilities for controllers and processors of personal data, including conducting data protection assessments for high-risk processing activities. - Violations would constitute deceptive trade practices, with fines of $100-$500 per violation. The Attorney General has enforcement authority. The bill exempts certain entities and data types, such as those regulated by HIPAA, the Fair Credit Reporting Act, and other federal laws. It takes effect on January 1, 2026.

Business and Industry

https://status.rilegislature.gov/