Generates content with AI, in Rhode Island

R.I. Gen. Laws § 11-9-1.3 · Read the law's page

• Do not produce, transport, reproduce, or possess a visual depiction of a minor engaging in sexually explicit conduct, including a computer-generated or digitally altered image of a minor; this statute's definition already reaches an AI-generated or AI-altered depiction without needing separate AI-specific language.
• An identifiable-minor depiction is covered even where it was created or modified using an image of the minor taken at another time, and proof of the minor's actual identity is not required.

R.I. Gen. Laws secs. 6-52-1 to 6-52-4 · Read the law's page

• Take reasonable steps to destroy, or arrange for the destruction of, a customer's personal information within your custody and control that you no longer retain, by shredding, erasing, or otherwise destroying or modifying it to make it unreadable or indecipherable through any means.
• Destroy the information to ensure the security and confidentiality of customer personal information, to protect against any reasonably foreseeable threats or hazards to its security or integrity, and to protect against unauthorized access to or use of it that could result in substantial harm or inconvenience to any customer.
• This binds a business: any sole proprietorship, partnership, corporation, association, limited liability company or other group, however organized and whether or not organized to operate at a profit, including the state, a state agency or a political subdivision that destroys records. It does not bind a financial institution subject to the Gramm Leach Bliley Act and a listed federal regulator or the Department of Business Regulation, a health insurer, non-profit hospital, medical service corporation or health care facility subject to the privacy and security standards of the Health Insurance Portability and Accountability Act of 1996, a consumer report agency in compliance with the Federal Credit Reporting Act, or a business that contracts with another business to destroy the information and has physical evidence of that contract.

R.I. Gen. Laws §§ 11-64-1, 11-64-3 · Read the law's page

• Do not disseminate, publish, or sell a sexually explicit visual image of an identifiable adult, including one created or altered by a digital device, without that person's consent, where you know or recklessly disregard that the person will likely suffer harm, or intend to harass, intimidate, threaten, or coerce them.
• A first violation is a misdemeanor; a second or subsequent violation, or a threat to disclose such an image for a benefit, or a demand for payment to remove one from public view, is a felony.
• This chapter does not impose liability on an interactive computer service, information service, or telecommunications service for content provided by another person.

R.I. Gen. Laws §§ 17-30-1 to 17-30-4 · Read the law's page

• Do not distribute synthetic media of a candidate's appearance, action, or speech within ninety days of an election if you know or should know it is deceptive and fraudulent, unless it carries a disclosure that it was manipulated or generated by artificial intelligence, in the size and timing this chapter specifies.
• A depicted candidate may seek an injunction and sue for damages plus attorney's fees; the burden is clear and convincing evidence.
• Broadcasters, qualifying news publications that flag the media as inaccurate, satire and parody, and interactive computer services are exempt from this chapter.

R.I. Gen. Laws §§ 23-108-1 to 23-108-3 (H 7538, Substitute A, 2026 Regular Session) · Read the law's page

• If you are a healthcare provider or facility that uses AI to document an in-person or telehealth visit, notify the patient that AI was used for that purpose.
• Review AI-generated visit documentation for accuracy after the visit.

R.I. Gen. Laws §§ 40.1-5.5-1 to 40.1-5.5-6 (H 7349, Substitute A, 2026 Regular Session) · Read the law's page

• Do not offer therapy or psychotherapy services to the public in Rhode Island, including through internet-based AI, unless a state-licensed professional or provider conducts them.
• If you are a licensed provider, use AI only for administrative or supplementary support with reasonable clinical oversight; never let it make independent therapeutic decisions, conduct therapeutic communication directly with a client absent an established provider relationship, or determine treatment plans.
• Where an AI companion or emotional-support tool assists with a recorded or transcribed therapy session, tell the patient (or their representative) in writing what the tool is for and obtain their consent before using it.

R.I. Gen. Laws secs. 11-49.3-2, 11-49.3-5 · Read the law's page

• Implement and maintain a risk-based information security program with reasonable security procedures and practices appropriate to your size and scope, the nature of the information, and the purpose for which it was collected, to protect the information from unauthorized access, use, modification, destruction, or disclosure and to preserve its confidentiality, integrity, and availability.
• Do not retain personal information longer than reasonably required to provide the requested services, meet the purpose for which it was collected, or comply with a written retention policy or a legal requirement; destroy it securely, for example by shredding, pulverization, incineration, or erasure, regardless of the medium it is stored in.
• If you disclose personal information about a Rhode Island resident to a nonaffiliated third party, require by written contract that the third party implement and maintain reasonable security procedures and practices of the same kind, appropriate to its own size and scope, the nature of the information, and the purpose for which it was collected.
• This binds a municipal agency, a state agency, or a person, defined broadly to include an individual, sole proprietorship, partnership, association, corporation, joint venture, business, legal entity, trust, estate, cooperative, or other commercial entity, that stores, collects, processes, maintains, acquires, uses, owns, or licenses personal information about a Rhode Island resident.
• A reckless violation of this duty is a civil violation of up to $100 per record; a knowing and willful violation is up to $200 per record. Only the Attorney General may bring an action.

R.I. Gen. Laws § 6-13.1 et seq. (Advance Notice of Proposed Rulemaking, Docket 110-40-00-5)

• This measure is proposed and binds nobody yet; what follows is what it would require if it is enacted in this form.
• If you develop or deploy an AI decision-making system used in health care, housing, employment or education, disclose that use of AI to affected consumers.
• If you develop or deploy an AI decision-making system used in health care, housing, employment or education, put de-biasing policies in place.
• If you develop or deploy an AI decision-making system used in health care, housing, employment or education, validate the efficacy claims you make for it.
• If you develop or deploy an AI decision-making system used in health care, housing, employment or education, limit its purposes to the uses consumers have consented to.
• If you develop or deploy an AI decision-making system used in health care, housing, employment or education, give consumers a way to appeal an adverse algorithmic outcome.

S 2010, 2026 Regular Session, Rhode Island General Assembly

• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
• If you are a health insurer, be transparent about your use of artificial intelligence in managing coverage decisions and claims.

R.I. Gen. Laws §§ 6-64-1 to 6-64-5 (S 2195, Substitute A as amended, 2026 Regular Session, P.L. 2026, ch. 376) · Read the law's page

• Do not operate or provide an AI companion unless it contains a protocol for addressing possible suicidal ideation or self-harm and possible physical harm to others expressed by a user, including a notification that refers the user to crisis service providers.
• Give a user a clear and conspicuous notification, at the beginning of any AI companion interaction and at least every three hours during a continuing interaction, stating verbally or in writing that the user is not communicating with a human.
• Beginning July 1, 2027, file an annual report with the Attorney General that includes the number of safety protocol activations and related metrics.