S 9088 New York Senate · 2025 Regular Session

Requires the registration of data brokers and establishing a data deletion mechanism for consumers

Summary

Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.

Issues: ✓ Technology

Bill status passed 3 of 5 stages cleared

Introduction

Jan 2026

Committee Review

Jun 2026

Senate Passage

Jun 2026

Assembly Passage

Governor

Introduced Jan 30, 2026 Last action Jun 4, 2026

Maddy AI version diff · 1 comparison

What changed between versions

S9088 → S9088A · 6 edits

MODERATE

The bill was amended to add new sections regarding data broker website disclosures and comprehensive information security programs, while removing the original enforcement section. The definitions were significantly expanded to include modern concepts like 'aggregate consumer information' and a broader definition of 'biometric data' that covers behavioral traits and DNA, while also clarifying the definition of 'business' to include specific revenue and data-sharing thresholds.

Scope change

The bill's scope expanded to include new requirements for website disclosures and security programs, while the specific enforcement mechanisms were removed from the text. The applicability criteria for who must register were refined with new financial and data-volume thresholds.

REQUIREMENT

Added new sections requiring data brokers to provide website disclosures and implement comprehensive information security programs.

ENFORCEMENT

Removed the original section dedicated to enforcement procedures.

DEFINITION

Added a new definition for 'aggregate consumer information' to distinguish it from individual records.

Expanded the definition of 'biometric data' to include behavioral characteristics, DNA, and sleep or exercise data.

Added a detailed definition for 'business' that sets specific thresholds for annual revenue, data volume, and revenue derived from selling personal information.

ELIGIBILITY

Refined eligibility criteria by replacing a general 'consumer' definition with a specific 'business' definition based on revenue and data handling practices.

Floor votes · Senate Jun 3, 2026

How they voted

51–10

Passed · 2 other

Total votes 63

Jun 3, 2026

D Democratic41

39 Yea 2

95% Yea

R Republican22

12 Yea 10 Nay

54% Yea

Vote distribution

All Yea All Nay Mixed No data

Full legislative history

Actions timeline

Total actions

Key actions

Committee

Amendments

Jun 4, 2026

Committee

REFERRED TO CONSUMER AFFAIRS AND PROTECTION

lower

Jun 3, 2026

Upper · Passed

PASSED SENATE

upper

Jun 3, 2026

Committee

COMMITTEE DISCHARGED AND COMMITTED TO RULES

upper

May 29, 2026

Upper · Passed

PRINT NUMBER 9088A

upper

May 29, 2026

Upper · Passed

AMEND AND RECOMMIT TO CONSUMER PROTECTION

upper

Jan 30, 2026

Committee

REFERRED TO CONSUMER PROTECTION

upper

1 primary · 0 co-sponsors