Your Rhode Island consumer data rights
In effect
Rhode Island's Data Transparency and Privacy Protection Act gives Rhode Island residents rights over the personal data that covered for-profit businesses collect about them. It has been in effect since January 1, 2026.
- Who or what it protects
- Rhode Island customers of for-profit businesses in the state or targeting its residents that, last year, processed the personal data of at least 35,000 customers, or of at least 10,000 while earning more than 20 percent of their gross revenue from selling personal data.
- What you can do
- You can confirm whether a business processes your personal data and see it, correct it, delete data you provided or that it obtained about you, and get a copy you can take elsewhere. You can opt out of targeted advertising, the sale of your data, and solely automated profiling with legal or similarly significant effects. A business needs your consent to process sensitive data and may not treat you worse for using your rights. Use the method in the company's privacy notice. It must respond within 45 days, which it can extend by 45 days, and if it declines, tell you why and how to appeal; one request a year is free. You can file a consumer complaint with the Rhode Island Attorney General.
- Limits and eligibility
- Rhode Island has no official consumer guide to this law yet, so this summary comes from the law itself. Only the Attorney General enforces it, and it gives you no right to sue.
- Who oversees it
- Rhode Island Attorney General
- The law
- Rhode Island Data Transparency and Privacy Protection Act
Checked against the official sources on October 6, 2026. Links last checked November 1, 2026.