Bill > S06867

This bill establishes new regulations for internet service providers (ISPs) regarding the handling and protection of personal information. The bill defines "personal information" extremely comprehensively, including everything from basic identifiers like name and address to detailed data such as internet searches, browser cache, medical conditions, financial information, and more. It requires ISPs to keep all personal information confidential unless the subscriber provides explicit written or electronic permission to disclose it, with special provisions for protecting email addresses. The bill mandates that ISPs must notify subscribers about their confidentiality rights and cannot impose supplemental charges or penalize subscribers who choose not to allow their personal information to be shared. Any ISP found in violation of these requirements would be considered guilty of a misdemeanor and subject to fines ranging from $500 to $1,000 for each violation. The legislation aims to give consumers more control over their personal data and prevent ISPs from monetizing subscriber information without explicit consent.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/S6867