A controller may not discriminate against a customer for exercising customer rights, nor deny goods or services, charge different prices or rates, or provide a different level of quality because the customer opts out of use of their data; it need not provide a service that requires data collection the customer has opted out of. Different prices and levels are allowed for bona fide loyalty, rewards, premium features, discount or club card programmes in which customers participate voluntarily. Applies to for-profit entities doing business in Rhode Island or targeting products or services to its residents that in the preceding calendar year controlled or processed personal data of at least 35,000 customers (excluding data processed solely to complete a payment) or of at least 10,000 customers while deriving more than 20 percent of gross revenue from selling personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.