Bill > S06701

This bill enacts the New York Privacy Act, which requires companies to disclose their methods of de-identifying personal information, place special safeguards around data sharing, and allow consumers to obtain the names of all entities with whom their information is shared. The bill grants consumers new rights, including the ability to access, correct, delete, and opt-out of the processing of their personal data. It also imposes obligations on companies to conduct data protection assessments, maintain reasonable data security, and obtain consent for certain uses of sensitive data. The bill empowers the New York Attorney General to enforce the law and grants consumers a private right of action for violations.