Rhode Island consumer data privacy act

Betegnelse

Betegnelse

R.I. Gen. Laws ch. 6-48.1

Nivå

Delstat RI

Status

I kraft

Vedtatt

2024-06-25

Gjelder fra

2026-01-01

Tilsynsorganer

Rhode Island AG

Navngitte krav

• Applicability and thresholds

  R.I. Gen. Laws ch. 6-48.1

  35,000 customers, or 10,000 customers with more than a fifth of gross revenue from the sale of personal data.

• Privacy notice

  R.I. Gen. Laws ch. 6-48.1

  A reasonably accessible notice naming the categories processed, the purposes, the categories shared and how rights are exercised.

• Consumer rights

  R.I. Gen. Laws ch. 6-48.1

  Access, deletion, portability, correction and opt-out of targeted advertising, sale and certain profiling, with an appeal route.

• Sensitive data

  R.I. Gen. Laws ch. 6-48.1

  Consent, or in some states a strict necessity standard, before sensitive categories are processed.

• Data protection assessment

  R.I. Gen. Laws ch. 6-48.1

  A documented assessment for targeted advertising, sale, sensitive data and profiling that carries a heightened risk.

• Processor contract

  R.I. Gen. Laws ch. 6-48.1

  A written contract that sets instructions, confidentiality, deletion or return, and audit rights.

• Enforcement

  R.I. Gen. Laws ch. 6-48.1

  Enforced by the state authority. The privacy notice must name the third parties to which personal data may be sold.

Offisiell kilde

• webserver.rilegislature.gov
• riag.ri.gov

EU-rettsakter på samme område

• gdpr

  Dekker samme grunn som personvernforordningen for informasjon, rettigheter og databehandleravtaler, men med smalere virkeområde og uten et generelt krav om rettslig grunnlag.