Law note · Rhode Island
Rhode Island Data Transparency and Privacy Protection Act, customer rights
cite R.I. Gen. Laws secs. 6-48.1-5, 6-48.1-6
stage RECENT in force 8 months
effective 2026-01-01
reviewed 2026-08-27
RIDTPPA gives a Rhode Island customer the right to confirm and access their personal data, correct inaccuracies, delete data, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and significant-effect profiling. A controller must respond without undue delay and not later than 45 days after receipt, with one 45-day extension available, and must decide an appeal within 60 days, after which the customer may complain to the Attorney General.
What it asks of an app
- Give a Rhode Island customer a means to confirm whether you process their personal data, access it, correct it, delete it, and receive a portable copy.
- Offer a Rhode Island customer an opt-out of targeted advertising, the sale of personal data, and significant-effect profiling.
- Respond to a customer rights request without undue delay and not later than 45 days after receipt, with one 45-day extension available, and decide an appeal within 60 days of receipt.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: official Rhode Island statute text, R.I. General Laws chapter 6-48.1, Rhode Island General Assembly website