What Is the Rhode Island Data Transparency and Privacy Protection Act?
RIDTPPA applies to controllers processing data of 35,000+ Rhode Island consumers or 20,000+ while selling data. Beyond standard deletion, access, and opt-out rights, the law requires brokers to maintain a public disclosure of what categories of data they collect and from what sources, giving consumers informed basis for targeting requests. AG enforcement via the Deceptive Trade Practices Act.
At a glance
- Full name
- Rhode Island Data Transparency and Privacy Protection Act
- Short code
- RIDTPPA
- Effective date
- January 1, 2026
- Response deadline
- 45 days
- Cure period
- None (sunset)
- Private right of action
- No
- Enforcement
- Rhode Island Attorney General — Consumer Protection Unit
- Maximum penalty
- Up to $10,000 per intentional violation under the Rhode Island Deceptive Trade Practices Act
- Statutory citation
- R.I. Gen. Laws § 6-48.1-1 et seq.
Who RIDTPPA applies to
A business is covered if it meets the applicability thresholds set out in R.I. Gen. Laws § 6-48.1-1 et seq.. Most state laws use an “or” framework — any one of the thresholds triggers coverage unless otherwise noted.
- Conducts business in Rhode Island, AND
- Controls or processes personal data of 35,000+ Rhode Island consumers (excluding data processed solely for payment), OR
- Controls or processes personal data of 10,000+ Rhode Island consumers AND derives more than 20% of gross revenue from the sale of personal data
Consumer rights under RIDTPPA
Delete, access, port, opt-out
Public data-source disclosure requirement
AG enforcement via DTPA
Notable features (vs. CCPA)
RIDTPPA is the most transparency-focused of the US state privacy laws. It requires businesses to list — in their public-facing privacy notice — the specific categories of personal data they sell or share AND the specific third parties (by name or by category with enough detail to be identifiable) that receive it. This is a stronger disclosure standard than any other state law. The law also applies to nonprofits meeting the thresholds.
Enforcement & penalties
Enforcing agency: Rhode Island Attorney General — Consumer Protection Unit
Maximum penalty: Up to $10,000 per intentional violation under the Rhode Island Deceptive Trade Practices Act
Cure period: RIDTPPA has no statutory cure period. Violations are directly enforceable once the business is put on notice.
Private right of action: RIDTPPA has no private right of action. Enforcement is exclusive to the Rhode Island Attorney General.
Where to file a complaint: Rhode Island Office of the Attorney General
How to exercise your RIDTPPA rights
- 1
Identify the business that holds your data (or use OfflistMe, which pre-targets 300+ known brokers and applies RIDTPPA citations automatically).
- 2
Submit a verifiable consumer request to the business's designated contact. Include enough identifying data that the business can verify you as a Rhode Island resident (e.g., ZIP code, email associated with your record).
- 3
Under RIDTPPA, businesses have 45 days to respond. Extensions are permitted with written notice under most state laws.
- 4
If the business fails to respond or denies the request without legal basis, file a complaint with the Rhode Island Office of the Attorney General at https://riag.ri.gov/consumer-protection/file-consumer-complaint.
Use your rights
RIDTPPA-compliant deletion emails, $5 one-time
OfflistMe drafts RIDTPPA-compliant deletion emails for 300+ data brokers. Citations included. You send from your own inbox. No account, no ID upload.
Start for $5 →FAQ
What is the data-source disclosure requirement?+
RIDTPPA requires covered data brokers to publish a plain-language summary of the categories of data they hold and the sources from which they obtain it. This lets Rhode Island consumers target deletion requests precisely and see which brokers hold which types of data.
Official sources & citations
Compare with sibling state laws
RIDTPPA is one of 18 comprehensive US state privacy laws. Its closest peers by effective date — useful when tracking how this law influenced or was influenced by neighbouring legislation: