Bill > A03593

This bill enacts the New York Privacy Act, which gives New York consumers new rights over their personal data, including the right to know how their data is being used and shared, the ability to access, correct, and delete their data, and the right to challenge certain automated decisions. The bill imposes various obligations on companies that collect, process, or share personal data, such as obtaining consent for certain uses, conducting risk assessments, and entering into contracts with third parties. The bill also establishes a state registry for data brokers and empowers the Attorney General to enforce the law and impose penalties for violations. The key provisions take effect two years after the bill becomes law, with the private right of action taking effect three years after.