Rhode Island § 11-49.3-6 § 11-49.3-6. Agencies or persons with security breach procedures.

Rhode Island Statutes

§ 11-49.3-6 — § 11-49.3-6. Agencies or persons with security breach procedures.

Rhode Island § 11-49.3-6

Title 11Criminal Offenses

Ch. 11-49.3Identity Theft Protection Act of 2015

This text of Rhode Island § 11-49.3-6 (§ 11-49.3-6. Agencies or persons with security breach procedures.) is published on Counsel Stack Legal Research, covering Rhode Island primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

R.I. Gen. Laws § 11-49.3-6 (2026).

Text

§ 11-49.3-6. Agencies or persons with security breach procedures.
(a) Any municipal agency, state agency, or person shall be deemed to be in compliance
            with the security breach notification requirements of § 11-49.3-4 if:
         
(1) The municipal agency, state agency, or person maintains its own security breach procedures
            as part of an information security policy for the treatment of personal information
            and otherwise complies with the timing requirements of § 11-49.3-4, and notifies subject persons in accordance with such municipal agency's, state agency's,
            or person's notification policies in the event of a breach of secur

Free access — add to your briefcase to read the full text and ask questions with AI

§ 11-49.3-6. Agencies or persons with security breach procedures.

(a) Any municipal agency, state agency, or person shall be deemed to be in compliance with the security breach notification requirements of § 11-49.3-4 if:

(1) The municipal agency, state agency, or person maintains its own security breach procedures as part of an information security policy for the treatment of personal information and otherwise complies with the timing requirements of § 11-49.3-4, and notifies subject persons in accordance with such municipal agency's, state agency's, or person's notification policies in the event of a breach of security; or

(2) The person maintains a security breach procedure pursuant to the rules, regulations, procedures, or guidelines established by the primary or functional regulator, as defined in 15 U.S.C. § 6809(2), and notifies subject persons in accordance with the policies or the rules, regulations, procedures, or guidelines established by the primary or functional regulator in the event of a breach of security of the system.

(b) A financial institution, trust company, credit union, or its affiliates that is subject to and examined for, and found in compliance with, the Federal Interagency Guidelines on Response Programs for Unauthorized Access to Customer Information and Customer Notice shall be deemed in compliance with this chapter.

(c) A provider of health care, healthcare service plan, health insurer, or a covered entity governed by the medical privacy and security rules issued by the federal Department of Health and Human Services, Parts 160 and 164 of Title 45 of the Code of Federal Regulations, established pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) shall be deemed in compliance with this chapter.