Rhode Island General Laws Title 42. State Affairs and Government § 42-28.10-3. Privacy policy and protections

(a) The RMS shall be responsible for safeguarding all collected information and shall comply with all state and federal privacy laws in order to protect privacy rights, civil rights, and civil liberties in the collection, use, analysis, retention, destruction, sharing, and disclosure of information. Information gathered and retained by the RMS may only be accessed, stored, or disseminated for the specific purpose of administering the provisions of this chapter and shall only be accessed by authorized users to have such access and only for those uses or purposes specified by law.

(b) The RMS shall not retain personal information for a period longer than is reasonably required to carry out the purposes of this chapter.

(c) The department of public safety is hereby directed to develop and maintain a privacy policy that shall ensure safeguards are in place to protect personal information from unlawful access, sharing and/or second party dissemination. The privacy policy shall include maintaining an access log.

(d) Any request for access to public records pursuant to the provisions of chapter 2 of title 38 shall be made to the agency that created the record.