Bill

Bill > S2638


RI S2638

RI S2638
Amends the Identity Theft Protection Act by eliminating current definitions and establishing new definitions. This act also raises the penalty provisions for violations.


summary

Introduced
02/27/2026
In Committee
02/27/2026
Crossed Over
Passed
Dead

Introduced Session

2026 Regular Session

Bill Summary

This act would amend the Identity Theft Protection Act of 2015. The act would eliminate the definitions for "classified data" and "personal information" and establish a definition for "personally identifiable information". This act would also add division of enterprise technology strategy and services (ETSS) or successor state agency, or successor to the chief digital officer to notification requirement provisions of the chapter. This act would raise the penalty provisions for violations. This act would take effect on July 1, 2026.

AI Summary

This bill amends the Identity Theft Protection Act of 2015 by updating its definitions and strengthening penalties for violations, with these changes taking effect on July 1, 2026. Key provisions include replacing the terms "classified data" and "personal information" with a single, broader definition of "personally identifiable information," which encompasses any data that can be used to identify an individual, directly or indirectly, including biometric and internet data. The bill also mandates that state and municipal agencies implement and maintain risk-based information security programs that adhere to current best practices and industry-recognized cybersecurity frameworks, and requires them to provide annual updates to the General Assembly and the Division of Enterprise Technology Strategy and Services (ETSS) or its successor. Furthermore, it expands the notification requirements for data breaches to include the ETSS or its successor, and increases the potential penalties for violations, allowing courts to impose additional sanctions beyond the per-record fines.

Committee Categories

Business and Industry

Sponsors (7)

Last Action

Introduced, referred to Senate Artificial Intelligence & Emerging Technol (on 02/27/2026)

bill text


bill summary

Loading...

bill summary

Loading...

bill summary

Loading...