Rhode Island Data Privacy & Data Broker Removal

Rhode Island has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here is how those rights work in practice and how to remove yourself from data brokers.

At a glance
Comprehensive privacy law? Yes — Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
In effect since January 1, 2026
Your core rights Access & Know, Correct, Delete, Data Portability +4 more
Honors Global Privacy Control? The RIDTPPA does not clearly mandate universal opt-out mechanism (GPC) recogniti
Data-broker registry? No
Can you sue? (private right of action) No
Enforced by Rhode Island Attorney General
Last verified June 2026 Reviewed quarterly

Your rights in Rhode Island

Rhode Island residents are protected by the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA).

Sensitive data gets extra protection. Companies need your explicit consent before collecting or using your most sensitive personal information — including biometric data, precise location, health information, race/ethnicity, and sexual orientation. This is a higher bar than the standard opt-out that applies to other data types.

Does this cover the company that has my data?

Most companies that collect or sell personal data in Rhode Island are likely covered.

Controls/processes personal data of 35,000+ Ri consumers, Or 10,000+ consumers And derives more than 20% of gross revenue from the sale of personal data (low threshold). Also imposes a notably broad transparency duty: any commercial website/online-service operator collecting personal data must disclose the categories collected and the third parties to whom data may be sold.

What's changing. RIDTPPA took effect January 1, 2026 (one of three laws — with Indiana and Kentucky — that became effective that date). Rhode Island reportedly enacted a judicial-privacy address-protection law in 2025 (H5892) — verify.

How to remove yourself from data brokers in Rhode Island

Your state law gives you the right to request deletion — but exercising it across hundreds of brokers takes real effort. Here are the most effective steps, in order.

1. Enable Global Privacy Control

Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to enable and works silently in the background on every site. Rhode Island does not mandate it yet, but most major companies honor it voluntarily because they must comply with California's law anyway.

2. Submit direct opt-out requests

For brokers not covered by the registry or GPC, you can submit requests directly. Look for the "Do Not Sell My Personal Information" link in each company's website footer — most major brokers have one. You can also submit formal access, deletion, or correction requests through each company's privacy policy page.

Under Rhode Island's law, covered companies must respond within the statutory deadline. If they don't, you have grounds to file a complaint with the Rhode Island Attorney General.

3. Automate ongoing removal

Here is the part nobody tells you: even after you complete every step above, brokers re-ingest your information from public records, data-sharing networks, and commercial databases. Within a few months, your profiles reappear. Staying removed from hundreds of brokers is not a one-time task — it is an ongoing commitment that most people cannot maintain manually.

Delist finds your exposed data and files removals on your behalf — then monitors so it stays down. Start with a free scan to see where your information is exposed.

Run a free scan

Rhode Island's data broker law: what it means for you

Rhode Island does not have a dedicated data-broker registry. Most national data brokers are registered in California and honor opt-out requests from residents of any state — but without a Rhode Island-specific law requiring it, you have no legal recourse if a broker ignores your request. Services like Delist handle this across states and brokers in one place.

Other privacy protections in Rhode Island

Beyond the comprehensive privacy law, Rhode Island has additional protections that may apply to you:

How to file a privacy complaint in Rhode Island

Rhode Island Attorney General, Consumer Protection Unit — https://riag.ri.gov/consumer-protection

Most state agencies enforce privacy laws in the aggregate — they investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it creates a record that helps trigger enforcement actions.

Frequently asked questions

Does Rhode Island have a data privacy law?
Yes. Rhode Island residents are protected by the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA), which gives you rights to access, delete, and control your personal data.
Can I sue a company for violating my privacy in Rhode Island?
Generally no. Privacy enforcement in Rhode Island is handled by Rhode Island Attorney General. You cannot sue for most violations.
How do I opt out of data brokers in Rhode Island?
Enable Global Privacy Control, submit direct opt-out requests to each broker, and consider a removal service to automate the process. Rhode Island has no broker registry.
Does Rhode Island require websites to honor Global Privacy Control?
Not yet mandated statewide, but many companies honor GPC voluntarily. Enable it in your browser settings — it costs nothing and signals your opt-out preference automatically.

Sources

This page is privacy-rights information, not legal advice. Privacy law changes frequently; verify current rules with your state privacy agency or a licensed attorney before acting. Last verified 2026-06-22. We re-check state privacy laws quarterly.

Take back your privacy in Rhode Island

Delist finds your exposed data and files removals on your behalf — then monitors so it stays down.

Run a free scan