Bill > A10091

This bill establishes a new legal pathway, called a "private right of action," allowing individuals to sue someone who intentionally shares their "personally identifying information" without consent, if that disclosure was done to harass, threaten, intimidate, or harm them, or with a reckless disregard for whether it would cause harm. "Personally identifying information" is broadly defined to include details like home addresses, phone numbers, email addresses, Social Security numbers, financial account numbers, driver's license numbers, biometric data, and specific location data, as long as it's not already lawfully and widely available to the public. The bill clarifies that simply because information was previously public doesn't excuse its malicious disclosure. It also specifies that this new right of action is in addition to any other legal remedies available and outlines what kind of relief a court can award, including financial damages, punitive damages up to $50,000, and legal costs, while also listing exceptions for lawful disclosures like reporting crimes, law enforcement activities, or matters of legitimate public concern.

Justice

https://www.nysenate.gov/legislation/bills/2025/A10091