The "Rhode Island Data Transparency and Privacy Protection Act" is a proposed addition to Title 6 of the General Laws, aimed at enhancing consumer privacy and transparency regarding the use of their personally identifiable information by businesses. The Act establishes definitions for terms such as "affiliate," "customer," "disclose," "operator," and "personally identifiable information," and outlines the conditions under which disclosure is permissible. It specifies the types of information considered personally identifiable, including names combined with sensitive data elements, and excludes encrypted or securely transmitted information. The Act applies to operators of commercial websites and online services that collect information from Rhode Island residents, with exceptions for small businesses and third-party operators. No deletions from current law are mentioned.

The bill mandates that operators disclose the categories of personally identifiable information collected and the parties to whom this information is sold. While it does not ban the collection or sale of such information, nor does it impose retention or disclosure requirements, it does impose fines ranging from $100 to $500 for intentional violations of the Act's provisions. The Rhode Island Attorney General's office is tasked with enforcement, and the Act is scheduled to take effect on January 1, 2024.