Law / United States / Rhode Island

Rhode Island Data Transparency and Privacy Protection Act, enforcement

R.I. Gen. Laws sec. 6-48.1-8

In force since .

An enforcement supervision rule binding private bodies.

Private right of action
No
Audit expectation
none

What it requires

  • Expect RIDTPPA violations to be enforced exclusively by the Rhode Island Attorney General, never by a private plaintiff.
  • Do not rely on a notice-and-cure opportunity before an Attorney General action. Unlike New Hampshire and Kentucky, Rhode Island's enforcement section contains no cure period.
  • Avoid intentionally disclosing personal data to a shell company or otherwise in violation of the chapter. Each such disclosure carries a fine of $100 to $500.

These lines are LexLint's reading of the law's text.

Who enforces it

Settledness

As of
Open questions
Which remedies of chapter 13.1 of title 6 may the Attorney General seek for a violation of chapter 48.1 that is not an intentional disclosure, given that R.I. Gen. Laws ยง 6-48.1-8(a) makes such a violation a deceptive trade practice?

What it makes you log

Logging duty

Section 6-48.1-8 makes a violation a deceptive trade practice, sets a fine of $100 to $500 for each intentional disclosure to a shell company or in violation of the chapter, gives the attorney general sole enforcement authority and bars a private right of action. It gives the attorney general no power to demand a record and names no log, period or record duty, so no audit expectation or access is coded. The section has no territorial clause of its own, so the hook is empty.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

A violation of RIDTPPA is a deceptive trade practice, and intentional disclosure of personal data to a shell company or otherwise in violation of the chapter carries a fine of $100 to $500 per disclosure. The Attorney General has sole enforcement authority, and unlike New Hampshire's and Kentucky's near-identical statutes, no mandatory or discretionary cure period appears in the enforcement section as read. The chapter creates no private right of action.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .