Bill > A00680

This bill enacts the NY Privacy Act, which requires companies to disclose their methods of de-identifying personal information, place special safeguards around data sharing, and allow consumers to obtain the names of all entities with whom their information is shared. The bill also creates a special account to fund a new Office of Privacy and Data Protection. Key provisions include requiring companies to obtain opt-in consent before processing personal data, giving consumers rights to access, correct, delete, and port their data, and imposing obligations on companies to conduct risk assessments and implement reasonable data security measures. The bill also establishes enforcement mechanisms, including a private right of action for consumers and penalties for violations.