Law note · Rhode Island
Rhode Island Data Transparency and Privacy Protection Act, enforcement
cite R.I. Gen. Laws sec. 6-48.1-8
stage RECENT in force 8 months
effective 2026-01-01
reviewed 2026-08-27
A violation of RIDTPPA is a deceptive trade practice, and intentional disclosure of personal data to a shell company or otherwise in violation of the chapter carries a fine of $100 to $500 per disclosure. The Attorney General has sole enforcement authority, and unlike New Hampshire's and Kentucky's near-identical statutes, no mandatory or discretionary cure period appears in the enforcement section as read. The chapter creates no private right of action.
What it asks of an app
- Expect RIDTPPA violations to be enforced exclusively by the Rhode Island Attorney General, never by a private plaintiff.
- Do not rely on a notice-and-cure opportunity before an Attorney General action. Unlike New Hampshire and Kentucky, Rhode Island's enforcement section contains no cure period.
- Avoid intentionally disclosing personal data to a shell company or otherwise in violation of the chapter. Each such disclosure carries a fine of $100 to $500.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official Rhode Island statute text, R.I. General Laws chapter 6-48.1, Rhode Island General Assembly website