Ask Reggi Your Question Now
Can I ignore my obligations as a service provider with access to personal information in Rhode Island? What are the requirements?
Obligations as a Service Provider with Access to Personal Information in Rhode Island
As a service provider with access to personal information in Rhode Island, you cannot ignore your obligations. Rhode Island law requires that licensees exercise appropriate due diligence in selecting their service providers and require their service providers to implement appropriate measures designed to meet the objectives of the regulation [1.1]. Additionally, licensees are required to comply with federal, state, or local laws, rules, and other applicable legal requirements [2.2].
Exceptions to notice and opt-out requirements for disclosure of nonpublic personal financial information for processing and servicing transactions are provided in [2.1]. Exceptions to opt-out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing are provided in [2.5]. When authorization is required for disclosure of nonpublic personal health information is provided in [2.3]. Acquisition of location information is provided in [4.1].
Furthermore, licensees are required to notify the Rhode Island Department of Business Regulation in the event of a breach of the security of computerized unencrypted data that poses a significant risk of identity theft [1.2].
Therefore, it is important to ensure that you are complying with all relevant laws and regulations when handling personal information as a service provider in Rhode Island.
Source(s):
- [1.1] Oversee Service Provider Arrangements
- [2.1] Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Processing and Servicing Transactions
- [2.2] Other Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information
- [2.3] When Authorization Required for Disclosure of Nonpublic Personal Health Information
- [1.2] Notification of Breach of Security System
- [2.5] Exception to Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information for Service Providers and Joint Marketing
- [4.1] Acquisition of location information.
Jurisdiction
Rhode Island