Bill > A00257

This bill establishes a comprehensive "Right to Know Act" that requires businesses to provide customers with detailed information about how their personal data is collected, stored, and shared. Specifically, businesses must offer customers free access to all of their personal information upon request and disclose the categories of information shared, the names and contact details of third parties receiving that information, and the specific ways the data is being used. The bill defines personal information broadly, including items like name, address, social security number, location data, internet activity, medical information, financial details, and more. Businesses must provide this information either through a designated request address, by providing notice before or immediately after disclosure, or through existing federal disclosure mechanisms. The law applies to any business operating in New York state and includes several important exceptions, such as disclosures required by law or necessary for fraud prevention. Customers, the attorney general, or local prosecutors can bring civil actions against businesses that violate these provisions. The underlying motivation is to give consumers more transparency and control over their personal data in an era of increasingly complex digital information sharing.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/A257