Managed IT diligence in Rhode Island.

Rhode Island, like every U.S. state, has a data breach notification law that sets duties and deadlines when personal information is compromised. Whatever its exact deadline, a provider bound by a contractual 72-hour notice clock has already committed to moving faster than any state statute requires of you, which is why that clause belongs in your agreement regardless of where you operate. The National Conference of State Legislatures maintains a fifty-state table of these laws; searching "NCSL security breach notification laws" will find it if the link below has moved.

Before hiring anyone, run their legal entity through Rhode Island's Secretary of State business search: every state operates one, free, and it shows whether the company exists, when it was formed, and whether it is in good standing. Search "Rhode Island Secretary of State business search" to reach it directly. Rhode Island's attorney general's office is the place to check for consumer complaints and to report provider misconduct.