Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Rhode Island: Bill on transparency and data protection recommended to be held for further study
Senate Bill 754 for an Act relating to commercial law - general regulatory provisions - Rhode Island data transparency and privacy protection was recommended to be held for further study, on May 2, 2023, by the State Senate Commerce Committee. In particular, the bill defines terms including 'personally identifiable information,' 'precise geolocation data,' 'processing,' 'sale of personal data,' and 'targeted advertising,' among other terms.
In addition, the bill provides that operators must establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of personal data. On consent, the bill notes that operators must provide customers with a mechanism to grant and revoke consent, not process sensitive personal data without obtaining customer consent, not process personal data for targeted advertising, or sell data without the customer's consent. Likewise, the bill stipulates data protection principles including data minimization and purpose limitation.
Lastly, the bill provides for other controller obligations, including the requirement to conduct a data processing assessment for controllers' processing activities that present a heightened risk of harm to customers and the need to conclude a binding contract between controllers and processors.
You can read the bill here and track its progress here, using the search bar.