Bill > A03629

This bill establishes comprehensive restrictions on how New York state government entities and their contractors can collect, share, and sell personal information. The legislation defines personal information broadly, including identifiers like names, addresses, social security numbers, and various other categories of data that could potentially identify an individual. The bill requires government entities to disclose to individuals what personal information they are collecting and why, and strictly limits the sharing and selling of such information. Specifically, government entities and contractors are prohibited from selling personal information, and can only share personal information with other entities or contractors when it is absolutely crucial for performing official duties and cannot be obtained through other means. The bill includes several important exceptions, such as complying with legal requests, freedom of information law, and specific federal reporting requirements. Contractors who receive personal information are bound by strict rules about how they can use the data, and must not retain or use it for purposes beyond the original contracted service. The law will take effect one year after becoming law, giving government agencies and contractors time to adjust their data handling practices to comply with the new regulations.

Government Affairs

https://www.nysenate.gov/legislation/bills/2025/A3629