RI H8119

Prohibits law enforcement entities from purchasing or obtaining personal data from third parties (including data brokers) in exchange for money, services, or fees without a valid warrant

Defines personal data broadly to include names, social security numbers, web browsing history, location information, financial and health records, biometric data, and communications content

Creates exceptions for data obtained with a probable cause warrant, exigent circumstances involving imminent danger, publicly available information, data shared with express individual consent, and information from the National Center for Missing and Exploited Children

Bars any personal data acquired in violation of the act from being used as evidence in any investigation, trial, hearing, or proceeding

Allows any person to sue for injunctive relief, declaratory relief, or attorneys' fees to enforce the act, and requires the Attorney General to adopt procedures for destroying improperly acquired data