Bill > S04860

This bill establishes the New York Data Protection Act, which creates comprehensive regulations for how government entities and contractors handle personal information of New York residents. The bill defines "personal information" broadly, including identifiers like names, addresses, Social Security numbers, and various types of personal data such as biometric information, employment records, and inferences about an individual's characteristics. Key provisions include giving individuals the right to request disclosure of personal information collected about them, including the categories of information, sources, and purposes of collection, as well as the right to request deletion of their personal information. Government entities and contractors must provide at least two methods for submitting information requests, respond within 45 days, and can only share personal information when crucial to their duties. The bill prohibits discrimination against individuals who exercise these rights and limits the sale or inappropriate sharing of personal information. Notably, the bill does not create a private right of action, but allows individuals to seek relief through the Attorney General's office in cases of unauthorized data access. The law will take effect one year after becoming law, giving government entities and contractors time to adjust their data handling practices to comply with the new requirements.

Government Affairs

https://www.nysenate.gov/legislation/bills/2025/S4860