Bill > S09088

This bill requires "data brokers," defined as entities that knowingly collect and sell personal information of consumers with whom they have no direct relationship, to register with the Attorney General and pay a fee, providing extensive details about their data collection practices, including the types of personal information they gather, whether they collect data from minors, and if they've shared data with foreign actors or AI developers. It also establishes a centralized "data deletion mechanism" managed by the Attorney General, allowing New York residents (consumers) to submit a single request to have their personal information deleted by all registered data brokers, with limited exceptions for data necessary for specific transactions or legal obligations. Furthermore, data brokers will be subject to independent audits every three years to ensure compliance with these regulations, and significant penalties, including daily fines and reimbursement of state costs, will be imposed for violations.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/S9088