Bill > A07423

This bill enacts the New York Data Protection Act, which aims to give New York consumers more control over their personal data. The key provisions include: - Requiring companies to disclose how they use, process, and share consumer personal data, including the categories of data, the purposes, and the third parties involved. - Giving consumers the right to opt out of targeted advertising, the sale of their personal data, and certain types of profiling. - Requiring companies to obtain explicit opt-in consent to process sensitive data like biometrics or precise geolocation. - Providing consumers the right to access, download, correct, and delete their personal data. - Imposing obligations on companies to secure personal data, limit its retention and use, and enter into contracts with processors and third parties to ensure data protection. - Establishing a registry and reporting requirements for "data brokers" that collect and sell consumer data. - Empowering the state Attorney General to enforce the law and impose civil penalties for violations. The bill seeks to help consumers regain privacy and control over their digital data in the face of expanding data collection and use by companies.

Business and Industry, Housing and Urban Affairs

https://www.nysenate.gov/legislation/bills/2023/A7423