Bill > H6062

This bill establishes a comprehensive new legal framework for protecting location information derived from electronic devices in Rhode Island, with the Department of Business Regulation (DBR) responsible for administering and enforcing the law. The bill defines location information broadly, including GPS coordinates, IP addresses, and cell-site location data, and sets strict requirements for how covered entities can collect, process, and disclose such information. Key provisions include mandating that entities obtain explicit, informed consent before collecting location data, limiting data collection to specific permissible purposes (such as providing a requested service or responding to emergencies), prohibiting the sale or unauthorized sharing of location information, and requiring transparent privacy policies. Individuals are granted significant protections, including the right to opt-out of targeted advertising, the ability to request deletion of their data, and the power to sue for damages if their location privacy is violated. The law imposes penalties of up to $5,000 per violation, allows for punitive damages, and prevents entities from retaliating against individuals who assert their privacy rights. Notably, the bill exempts healthcare-related location data and requires covered entities to obtain new consent for any location information collected before the law's effective date, ensuring comprehensive privacy safeguards for Rhode Island residents.

Business and Industry

https://status.rilegislature.gov/