Rhode Island Data Removal Guide (2026)
Rhode Island's Data Transparency and Privacy Protection Act took effect January 2026. It combines customer rights for covered for-profit entities with specified disclosure rules for qualifying commercial websites and internet service providers; it is not limited to data brokers.
Research status: published state guide pending fresh official-source re-verification.
This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.
At a glance
- Comprehensive state privacy law
- Recorded: RIDTPPA
- Broker response deadline
- 45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
- Enforcement
- Rhode Island Office of the Attorney General
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
RIDTPPA applies to for-profit entities doing business in Rhode Island or targeting Rhode Island residents that meet either the 35,000-consumer branch or the 10,000-consumer-plus-more-than-20%-sale-revenue branch, subject to exemptions. Rights include access, correction, deletion, portability, and opt-outs from targeted advertising, sale, and certain profiling; controllers generally respond within 45 days, with a possible 45-day extension. Section 6-48.1-3 also requires qualifying commercial websites or internet service providers that collect, store, and sell customers' personally identifiable information to identify data categories, relevant third parties, and a contact mechanism in specified notices. The AG has sole enforcement authority and the chapter creates no private right of action.
Read the full RIDTPPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.
What rights do Rhode Island residents have?
- →Access, correct, delete, port, and opt out of targeted advertising, sale, and certain profiling
- →Customer-facing category and third-party disclosure for qualifying commercial websites and ISPs
- →AG sole enforcement; no private right of action
Where does your data leak from in Rhode Island?
The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Rhode Island:
- Rhode Island Judiciary case search
- Providence County property records
- Rhode Island DMV records
Generate requests in under 60 seconds
Generate requests for 1009 US/global broker workflows for $9
What if a broker ignores your request?
If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Rhode Island Office of the Attorney General complaint route. The authority's jurisdiction and available remedies vary.
File a complaint with Rhode Island Office of the Attorney General ↗FAQ: Rhode Island data removal
What is the data-source disclosure requirement?+
Section 6-48.1-3 applies to a commercial website or internet service provider subject to Rhode Island jurisdiction that collects, stores, and sells customers' personally identifiable information. The required customer agreement, addendum, or conspicuous website notice must identify the categories collected, the third parties to whom the information has been sold or may be sold, and an active contact method; sale and targeted-advertising processing must also be disclosed.