Ask Reggi Your Question Now
Can I use third-party cloud storage services that collect personal information in Rhode Island? What are the requirements?
Using Third-Party Cloud Storage Services in Rhode Island
Based on the information provided in the context documents, Rhode Island has specific regulations regarding the use of cloud computing services that collect personal information.
According to RIGL 16-104-1, any person who provides a cloud computing service to an educational institution operating within the state shall process data of a student enrolled in kindergarten through twelfth (12th) grade for the sole purpose of providing the cloud computing service to the educational institution and shall not process such data for any commercial purposes, including, but not limited to, advertising purposes that benefit the cloud computing service provider. Each cloud computing service that enters into a contract to provide such services shall certify, in writing, that it shall comply with the provisions of this section.
However, it is unclear from the context documents whether these regulations apply to third-party cloud storage services that collect personal information outside of educational institutions.
Additionally, there are specific regulations regarding the disclosure of nonpublic personal financial information and nonpublic personal health information by licensees in Rhode Island. These regulations require obtaining authorization from the consumer or customer whose nonpublic personal information is sought to be disclosed, except in certain circumstances [2.1][2.2][2.3].
Therefore, it is recommended that you consult with a legal expert or the Rhode Island Department of Education for further guidance on the use of third-party cloud storage services that collect personal information in Rhode Island.
Conclusion
Based on the information provided in the context documents, it is unclear whether you can use third-party cloud storage services that collect personal information in Rhode Island. It is recommended that you consult with a legal expert or the Rhode Island Department of Education for further guidance.
Source(s):
- [2.1] Limits on Disclosure of Nonpublic Personal Financial Information to Nonaffiliated Third Parties
- [2.2] Other Exceptions to Notice and Opt Out Requirements for Disclosure of Nonpublic Personal Financial Information
- [2.3] When Authorization Required for Disclosure of Nonpublic Personal Health Information
Jurisdiction
Rhode Island