Law note · Rhode Island
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA), general applicability
RIDTPPA applies only to for-profit entities conducting business in Rhode Island, or targeting products or services to Rhode Island residents, that in the preceding calendar year controlled or processed personal data of at least 35,000 customers (excluding payment-only data), or 10,000 customers while deriving more than 20 percent of gross revenue from personal-data sales.
Two companion 2024 bills, H 7787 and S 2500, produced two public laws for the same chapter (P.L. 2024, ch. 430 and ch. 453), both effective January 1, 2026.
What it asks of an app
- Determine whether you are a for-profit entity conducting business in Rhode Island, or targeting products or services to Rhode Island residents, that controlled or processed personal data of at least 35,000 customers, or 10,000 customers while deriving more than 20 percent of gross revenue from personal-data sales, before relying on any RIDTPPA exemption.
When LexLint raises it
Declared activities: automated_outreach, crawls_web, deploys_chatbot, processes_biometrics, processes_voice, trains_models
Primary source: official Rhode Island statute text, R.I. General Laws chapter 6-48.1, Rhode Island General Assembly website