Bill > H7632

This bill, titled the Age-Appropriate Design Code, mandates that any "covered entity" – a business operating in Rhode Island that collects personal data and meets certain revenue or data processing thresholds – must prioritize the "best interest of children" when designing or developing online services, products, or features that children are reasonably likely to access. A "child" is defined as anyone under 18 years old. The bill requires these entities to conduct "data protection impact assessments" to evaluate potential risks to children, such as financial harm, privacy intrusions, or discrimination, and to implement measures to avoid these risks. It also prohibits certain practices, like using "dark patterns" (user interfaces designed to trick users) to collect more data than necessary or profiling children by default. The "attorney general" is empowered to enforce these provisions, with violators facing civil penalties of up to $2,500 per negligent violation or $7,500 per intentional violation per affected child, and the bill will take effect on January 1, 2027.

Business and Industry

https://status.rilegislature.gov/