Bill > A09642

This bill requires "data brokers," defined as entities that knowingly collect and sell personal information of consumers with whom they have no direct relationship, to register with the Attorney General and pay a fee, disclosing detailed information about their data collection practices, including whether they collect sensitive data like biometric information or precise geolocation, and if they've shared data with foreign adversaries, the federal government, or AI developers. It also establishes a mandatory "data deletion mechanism" that consumers can use to request the removal of their personal information from data brokers' systems, with specific timelines and exceptions for certain necessary data uses, and mandates independent third-party audits of data brokers every three years to ensure compliance, with penalties for violations including daily fines and reimbursement of state costs.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/A9642