Rhode Island Data Transparency and Privacy Protection Act - ADM provisions
Effective date
Penalty
$10,000 per civil violation. $500 per intentional disclosure of personal data. NO CURE PERIOD. Rhode Island is one of the only state privacy laws providing n…
Obligations mapped
18 obligations
Overview
Rhode Island's privacy framework includes consumer rights tied to profiling and automated decisions, including opt-out and disclosure obligations. Opt-out limited to solely automated decisions. However, Rhode Island defines profiling broadly: human oversight and input into the outcome does not remove processing from the definition of profiling (broader than most states).
This is a privacy law with automated decision-making provisions.
See if this regulation applies to your company with the free exposure scan.
Who this applies to
This regulation applies to the following roles:
- Deployers and users of covered AI systems and tools
- Organizations operating in Rhode Island
This regulation applies to companies that use or deploy AI tools and systems built by other vendors. If your company uses AI-powered products in the areas listed below, this regulation may apply to you.
6-48.1-3(a)-(b) · 6-48.1-7(s) and related sections
AI categories covered
- Consumer-facing AI
- Automated decision-making
- Algorithmic profiling
Specific AI use cases:
- Customer profiling and segmentation
- Credit scoring and risk assessment
What this requires you to do
18 obligations identified from statutory analysis.
6-48.1-7(c)
6-48.1-5(e)(1), 6-48.1-6
6-48.1-5(e)(2), 6-48.1-6
6-48.1-5(e)(3), 6-48.1-6
6-48.1-5(e)(4)
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.
Enforcement and penalties
$10,000 per civil violation. $500 per intentional disclosure of personal data. NO CURE PERIOD. Rhode Island is one of the only state privacy laws providing no opportunity to remedy violations before enforcement. AG-only enforcement. No private right of action. No universal opt-out mechanism requirement.
Private right of action: plaintiffs may bring direct claims in addition to government enforcement.
Penalty amounts are based on statutory text and may be subject to adjustment, judicial interpretation, or enforcement discretion.
Rhode Island AI regulation guide lists every tracked rule for this jurisdiction with timelines and obligation tallies.
Regulation summaries are simplified for readability and may not capture every nuance of the underlying statute. Verify important details against primary sources linked on this page.