Bill > A08158

This bill enacts the New York Privacy Act, a comprehensive data privacy law designed to give consumers more control over their personal information. The bill requires companies that conduct business in New York or target New York residents to provide clear notices about data collection, processing, and sharing practices. Specifically, companies must disclose the categories of personal data they collect, the purposes for processing that data, and the types of third parties with whom the data is shared. Consumers are granted several key rights, including the ability to opt out of targeted advertising and data sales, access and correct their personal data, request data deletion, and obtain a portable copy of their data in a machine-readable format. The bill applies to companies that meet certain thresholds, such as having annual gross revenue of $25 million or processing data of 50,000 consumers. Companies must obtain explicit consent for processing sensitive data, implement reasonable data security measures, and are prohibited from discriminating against consumers who exercise their privacy rights. The New York Attorney General is empowered to enforce the law, with potential penalties of up to $20,000 per violation. The law is designed to provide enhanced privacy protections, increase transparency in data practices, and give consumers more autonomy over their personal information.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/A8158