RI HB 7787 / SB 2500 (2024)
Comprehensive privacy law with lower applicability thresholds than most states: covers entities processing data of 35,000+ consumers OR 10,000+ consumers if 20%+ of revenue from data sales. Consumer rights: access, correct, delete, portable copies, opt-out (targeted advertising, data sales, significant-effect profiling). Prior consent required for sensitive data. Violations are enforceable by the AG as deceptive trade practices ($10,000 DTPA ceiling); the act itself sets $100–$500 per intentional unauthorized disclosure. No cure period.