Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) Awareness Course
Rhode Island's privacy law stands out for one critical reason: there is NO cure period. While most state privacy laws give organisations 30-60 days to fix violations before enforcement action, Rhode Island allows immediate enforcement. You need to get it right from day one.
This course gives your team practical guidance on the Rhode Island Data Transparency and Privacy Protection Act. We cover who the law applies to, what rights Rhode Island residents have, the unique requirement to disclose future third-party recipients, and the immediate enforcement approach.
The RIDTPPA treats violations as deceptive trade practices - a powerful enforcement mechanism. Understanding these requirements is essential for any organisation processing personal data of Rhode Island residents. No technical background required - just focused, practical training your team can apply immediately.
Why learn about the RIDTPPA?
- Understand Rhode Island's unique NO cure period enforcement approach
- Know the requirement to disclose FUTURE third-party data recipients
- Handle consumer data requests correctly within required timeframes
- Avoid violations that are treated as deceptive trade practices
- Prepare for New England's expanding privacy compliance landscape
Course features
Rhode Island-specific
Focused entirely on the RIDTPPA with Rhode Island-specific requirements, thresholds, and the unique enforcement approach.
Practical scenarios
Real-world examples and case studies showing how the RIDTPPA applies in everyday business situations.
Current content
Built to reflect the law as enacted, with updates as regulations and guidance are issued.
Official sources
Built from the Rhode Island General Laws and official guidance, with references to authoritative documentation.
Learning with us
Course information
Learning outcomes
- Understand when and how the RIDTPPA applies to your organisation
- Know the rights Rhode Island residents have over their personal data
- Recognise sensitive data and understand the opt-in consent requirement
- Handle consumer data requests correctly within required timeframes
- Understand the no-cure-period enforcement and potential penalties
Training recommendations
- All employees who handle customer data should complete this training.
- Annual refresher training is recommended to stay current with any amendments and enforcement developments.
- Teams handling sensitive data or consumer requests may benefit from additional role-specific training.
This course is recommended for
Employees who handle customer data at organisations that conduct business in Rhode Island or target Rhode Island residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.
Prerequisites
There are no prerequisites for this course. No legal or technical background is required.
What do I need for this course?
This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).
Course content
In this section we introduce the Rhode Island Data Transparency and Privacy Protection Act and explain why it matters for your organisation. We cover when the law applies, who it protects, and the key definitions you need to understand.
Lessons
- Introduction to the RIDTPPA
- Who the law applies to
- Key definitions explained
- Rhode Island residents and their rights
Rhode Island residents have specific rights over their personal data. In this section we cover what those rights are, how to recognise a valid request, and what your obligations are when you receive one.
Lessons
- The right to know and access
- The right to correction and deletion
- The right to data portability
- The right to opt out of sales and targeted advertising
- Handling consumer requests
The RIDTPPA requires opt-in consent before processing sensitive data. We explain what counts as sensitive data under Rhode Island law and how to handle it correctly.
Lessons
- What is sensitive data under RIDTPPA?
- The opt-in consent requirement
- Children's data protections
- Biometric and health data considerations
This section covers the operational requirements of the RIDTPPA including data minimisation, purpose limitation, security obligations, and working with third-party processors.
Lessons
- Data minimisation principles
- Purpose limitation requirements
- Security obligations
- Processor contracts and responsibilities
- Data protection assessments
Learn about the transparency requirements under RIDTPPA, including what your privacy notice must contain and how to communicate with consumers about their data.
Lessons
- Privacy notice requirements
- Disclosure of future third-party recipients
- Universal opt-out mechanisms
- Communicating with consumers
Understand the enforcement landscape and what penalties look like. Rhode Island has NO cure period, making immediate compliance essential.
Lessons
- Attorney General enforcement
- No cure period - immediate enforcement
- Violations as deceptive trade practices
- Civil penalties
- Responding to investigations
Test your knowledge with scenario-based questions covering all the key RIDTPPA concepts from the course.
Lessons
- Knowledge check (10 questions)
How it works
Get notified
Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.
Start learning
Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.
Stay compliant
As the RIDTPPA evolves and guidance is issued, we'll update the course. Trainees can review updated materials to stay current.
What's included
Training
- Distraction-free online learning platform
- Scenario-based end of course assessment
Updates
- Access to all course material updates and enhancements for the length of your access period
Certification
- Certificate on completion
Course FAQs
Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.
This course is designed for employees who handle customer data at organisations that may be subject to Rhode Island's privacy law. This includes marketing, sales, customer service, HR, and IT teams at organisations that process data of Rhode Island residents.
Rhode Island's law stands out for having NO cure period - meaning the Attorney General can take immediate enforcement action without giving organisations time to fix violations first. It also requires disclosure of FUTURE third-party recipients of personal data, which is a unique requirement. Violations are classified as deceptive trade practices.
RIDTPPA applies to organisations that conduct business in Rhode Island or produce products or services targeted to Rhode Island residents and meet certain data processing thresholds. The law has specific criteria for the number of consumers whose data you process and whether you derive revenue from selling personal data.
The Rhode Island Attorney General can impose civil penalties for violations of the RIDTPPA. Critically, there is NO cure period - enforcement action can be taken immediately without giving organisations an opportunity to fix violations first. Violations are treated as deceptive trade practices. There is no private right of action.
Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.
The course typically takes 30-35 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.
Get notified when this course launches
Sign up to our newsletter to be the first to know when this course is available.
This course will be included in Measured Collective Plus
Get access to all our courses with one subscription from £236/year.
Learn About MC PlusAvailable courses
PECR & ePrivacy for Marketers
Included in PLUS
Learn PECR rules for direct marketing, cookies, and tracking technologies. Built for marketing and sales teams. Certificate on completion.
View Course
GDPR Refresher Training Course
Included in PLUS
A 25-minute refresher covering recent enforcement cases, the Data Use and Access Act 2025, and current GDPR best practices. Certificate…
View Course
GDPR Essentials Course
Included in PLUS
Master UK GDPR fundamentals: data protection principles, lawful bases, data subject rights, and compliance essentials. Certificate on completion.
View Course