The requirements relating to privacy policies apply to any commercial website or internet service provider conducting business in Rhode Island or with Rhode Island customers or otherwise subject to Rhode Island jurisdiction
The remaining requirements apply to for-profit entities that conduct business in Rhode Island or produce products or services targeted to Rhode Island residents and during the preceding calendar year controlled or processed:
personal data of at least 35,000 Rhode Island customers, other than personal data controlled or processed solely for the purpose of completing a payment transaction; OR
personal data of at least 10,000 Rhode Island customers and derived more than 20% of gross revenue from the sale of personal data
