A licensee that is required to send a disclosure of a breach of the security of computerized unencrypted data that poses a significant risk of identity theft pursuant to Rhode Island Identity Theft Protection Act of 2015 (R.I. Gen Laws § 11-49.3-4) is also required to send a notice of the breach to the Rhode Island Department of Business Regulation. The disclosure to the Department shall be made in the most expedient time possible and without unreasonable delay consistent with the disclosure required in the R.I. Gen. Laws § 11-49.3-4.
230 R.I. Code R. 230-RICR-20-60-8.11