Rhode Island Data Privacy & Data Broker Removal

Rhode Island has a comprehensive privacy law that gives you the right to access, delete, and control your personal data. Here is how those rights work in practice and how to remove yourself from data brokers.

Your rights in Rhode Island

Rhode Island residents are protected by the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA).

• Right to access and know: Request a copy of the personal information a company holds about you.
• Right to correct: Request corrections to inaccurate personal information.
• Right to delete: Ask a company to delete your personal information.
• Right to data portability: Get your data in a portable format you can take to another service.
• Right to opt out of sale: Tell a company to stop selling your personal information.
• Right to opt out of targeted advertising: Stop companies from targeting you with ads based on your personal data.
• Right to opt out of profiling: Stop companies from building a behavioral profile about you.
• Right to appeal: Challenge a company's decision to deny your privacy request.

Does this cover the company that has my data?

Most companies that collect or sell personal data in Rhode Island are likely covered.

The law reaches companies that do business in Rhode Island or target its residents and, in a year, control or process the personal data of at least 35,000 Rhode Island consumers, or at least 10,000 consumers while earning more than 20% of gross revenue from selling personal data. It also adds a broad transparency duty: any commercial website or online service that collects personal data must disclose the categories it collects and the third parties it may sell to.

How to remove yourself from data brokers in Rhode Island

Your state law gives you the right to request deletion, but exercising it across every broker that holds your data takes real effort. Here are the most effective steps, in order.

1. Enable Global Privacy Control

Global Privacy Control is a free browser setting that automatically tells every website you visit not to sell or share your data. It takes two minutes to enable and works silently in the background on every site. Rhode Island does not mandate it yet, but most major companies honor it voluntarily because they must comply with California's law anyway.

2. Submit direct opt-out requests

For brokers not covered by the registry or GPC, you can submit requests directly. Look for the "Do Not Sell My Personal Information" link in each company's website footer; most major brokers have one. You can also submit formal access, deletion, or correction requests through each company's privacy policy page.

Under Rhode Island's law, covered companies must respond within 45 days (with one 45-day extension allowed). If they don't, you have grounds to file a complaint with the Rhode Island attorney general.

3. Automate ongoing removal

Here is the part nobody tells you: even after you complete every step above, brokers re-ingest your information from public records, data-sharing networks, and commercial databases. Within a few months, your profiles reappear. Staying removed is not a one-time task; it is ongoing work that most people cannot keep up with manually.

Rhode Island's data broker law: what it means for you

Rhode Island does not have a dedicated data-broker registry. Most national data brokers are registered in California and honor opt-out requests from residents of any state, but without a Rhode Island-specific law requiring it, you have no legal recourse if a broker ignores your request. Delist handles this across states and brokers in one place.

Other privacy protections in Rhode Island

Beyond the comprehensive privacy law, Rhode Island has additional protections that may apply to you:

• Address protection for judicial officers: The Judicial Security Act (H5892, 2025) lets current, retired, and recalled judges and magistrates require agencies and data brokers to remove their home address, phone numbers, and personal email from public view.
• Biometric data: Rhode Island has no standalone biometric-privacy statute with a private right of action. Biometric data is treated as sensitive data under RIDTPPA, so it needs your opt-in consent.

How to file a privacy complaint in Rhode Island

Rhode Island Attorney General, Consumer Protection Unit: https://riag.ri.gov/consumer-protection

Most state agencies enforce privacy laws in the aggregate: they investigate patterns of violations rather than resolving individual disputes. Filing a complaint still matters: it creates a record that helps trigger enforcement actions.

Frequently asked questions

Sources

• webserver.rilegislature.gov
• riag.ri.gov
• koleyjessen.com