State Breach Law
Rhode Island Data Breach Notification Law
R.I. Gen. Laws §§ 11-49.3-1 to 11-49.3-6 • Effective 2006-03-01
Rhode Island gives you 45 days to notify affected residents. Also requires notifying the AG.
Notification deadline: 45 days
Enforcement: Rhode Island Attorney General
Overview
Rhode Island requires notification within 45 days of breach discovery. Includes data protection requirements.
Who Must Be Notified
- • Affected Rhode Island residents
- • Rhode Island Attorney General
Covered Data Types
Social Security number, Driver's license number, Financial account numbers, Email with password
Notification Requirements
- • Written notice
- • Must include steps to protect self
Is your business exposed?
Exemptions
- • Encrypted data
- • Good faith acquisition
Penalties
Up to $100 per affected resident, $25,000 max per breach
If You Experience a Breach
- 1.
Notify AG and residents within 45 days
Official Source
https://riag.ri.gov/Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required