State Guide
Rhode Island Privacy & Data Security Laws
Every statute below can apply to a business handling Rhode Island residents' data, depending on your revenue, the number of Rhode Island consumers you process, and what kind of data you collect. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
Delaware-style lower thresholds: applies at 35,000+ Rhode Island consumers, or 10,000+ if 20%+ of revenue comes from selling personal data.
Data Security & Breach Notification · 1
Requires a risk-based information security program scaled to organization size, data sensitivity, and collection purpose, with flow-down requirements to third parties. Applies regardless of company size whenever you hold covered personal information about a resident of this state.