Rhode Island Division of Information Technology provides accessibility guidance for state agencies aligned with federal requirements.
Rhode Island Accessibility & Privacy Laws
Rhode Island does not currently have a comprehensive consumer privacy law. However, the state enacted the Rhode Island Data Transparency and Privacy Protection Act and has strong data breach notification requirements. Rhode Island state government maintains accessibility standards for digital services to ensure equal access for all residents.
→
Accessibility Standards
State IT Policy
→
Privacy Status
Data Protection Act
Rhode Island has the Data Transparency and Privacy Protection Act and Identity Theft Protection Act but no comprehensive consumer privacy law.
Privacy Law Status
Rhode Island has not enacted comprehensive consumer privacy legislation similar to CCPA. However, the state has significant data protection requirements:
Current Privacy Protections
- Identity Theft Protection Act: Comprehensive breach notification requirements (R.I. Gen. Laws ยง 11-49.3)
- Data Transparency and Privacy Protection Act: Requires businesses to disclose data collection practices
- Confidentiality of Health Care Information: Protections for health-related personal information
- Student Data: Protections for student information in educational settings
Data Breach Notification Requirements
| Requirement | Details |
|---|---|
| Notification Trigger | Unauthorized acquisition of unencrypted personal information that compromises security |
| Covered Information | Name plus SSN, driver's license, financial account, email with password, or medical/health insurance info |
| Notification Timeline | Within 45 calendar days of confirmation of breach |
| AG Notification | Required for all breaches affecting Rhode Island residents |
| Credit Monitoring | May be required when SSN is compromised |
Rhode Island State Government Accessibility
Rhode Island Division of Information Technology oversees accessibility standards for state government websites and applications. State agencies must ensure digital accessibility under ADA Title II requirements and state policy.
Covered Entities
- Rhode Island state government agencies
- State contractors and IT vendors
- Rhode Island public higher education institutions
- Local government entities
- State-funded programs and services
Accessibility Standards
- WCAG 2.0 Level AA compliance as baseline
- Section 508 alignment for federally-funded programs
- ADA Title II compliance for all public services
- Alternative formats available upon request
- Accessibility considerations in procurement
Data Security Requirements
Rhode Island law imposes specific data security requirements on businesses:
| Requirement | Description |
|---|---|
| Security Program | Implement and maintain a comprehensive information security program |
| Risk Assessment | Identify and assess security risks to personal information |
| Data Disposal | Properly dispose of records containing personal information |
| Employee Training | Train employees on security policies and procedures |
→
Business Obligations
- Implement reasonable security measures
- Notify consumers of data breaches within 45 days
- Notify Attorney General of all breaches
- Properly dispose of personal information
- Disclose data collection practices
→
Key Agencies
- Rhode Island Attorney General
- Division of Information Technology
- Department of Business Regulation
- Commission for Human Rights
- Governor's Commission on Disabilities
Consumer Rights
Rhode Island consumers have the following rights under existing law:
- Breach Notification: Right to be notified of data breaches within 45 days
- Security Freeze: Right to place a security freeze on credit reports at no charge
- Credit Monitoring: May receive free credit monitoring after certain breaches
- Consumer Protection: Protection against unfair and deceptive practices
- Access to Public Records: Right to access government records under the Access to Public Records Act
Related Resources
- US Privacy Laws Overview
- State Privacy Law Comparison
- Business Privacy Obligations
- ADA Title II Requirements
- All State Laws
- Contact Us
Need Compliance Guidance?
While Rhode Island doesn't have comprehensive privacy legislation, the state has strict breach notification requirements with a 45-day timeline. Contact our experts for guidance on current obligations and accessibility compliance.