R.I. Gen. Laws § 19-3-13.1
No financial institution or credit union authorized pursuant to § 19-3-13 to make available for use by its customers any electronic banking devices or machines (customer bank communication terminals/automated teller machines) shall mail to any of its customers any card or device necessary to access the machines without the permission of its customers and neither shall any financial institution or credit union mail to its customer an access card and the access card's personal identification number (PIN) within three (3) days of each other unless requested by the customer. Any violation of this section shall result in a fine of one hundred dollars ($100) per incident to be levied against the offending financial institution, and the financial institution shall be liable for any unauthorized withdrawals from a customer's account that results from a violation of this section.
R.I. Gen. Laws § 19-3-13.1