Bill > S06922

This bill aims to strengthen consumer privacy protections by requiring businesses to provide customers with detailed information about how their personal information is being collected, used, and shared. Specifically, the bill mandates that businesses must offer customers free access to all of their personal information and disclose the categories of information being shared, the names and contact information of third parties receiving that information, and the specific details of such disclosures. The bill defines personal information broadly, including everything from identity and contact details to internet activity, medical information, and location data. Businesses must establish designated request methods for customers to obtain this information, such as a specific email address or webpage, and must respond within 30 days. The bill recognizes the growing complexity of data collection in the digital age, noting that websites and mobile apps increasingly track and share personal details with third-party companies. Importantly, the bill allows customers, the attorney general, district attorneys, and other legal representatives to bring civil actions against businesses that violate these privacy provisions, treating such violations as direct injuries to customers. The legislation applies to businesses operating in New York State and is designed to give consumers more transparency and control over their personal information.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/S6922