Bill > A00974

This bill, known as the New York Data Protection Act, aims to enhance consumer privacy by granting New York residents greater control over their personal data and imposing new responsibilities on businesses that collect and process this information. Key provisions include requiring companies to clearly disclose how they use, process, and share personal data, and giving consumers the right to access, correct, and delete their data, as well as transfer it to other services. The bill also mandates that businesses implement robust data security measures, obtain explicit consent for certain data uses, and conduct regular assessments to ensure data is not being misused. Furthermore, it empowers the New York State Attorney General to enforce these provisions and impose penalties for violations, with specific rules around sensitive data, de-identified data (data that cannot reasonably be linked back to an individual), and the sale of personal information. The act will take effect immediately, but most of its provisions will be implemented two years after becoming law.