Technology (Consumer Data Protection)

in committee · New York · Assembly Jan 7, 2026

A 7719: Establishes a commission to study cyber security in the state

This bill establishes a 11-member commission within New York's Office of Information Technology Services to study the European Union's GDPR (General Data Protection Regulation) and assess the state's current cyber security landscape. The commission will examine critical infrastructure sectors - including financial systems, electrical grids, transportation, and first responder networks - to develop recommendations for protecting online personal information. The group must submit a report to the governor and legislature within one year, evaluating EU models and New York-specific cyber threats like hacking and cybercrime. The commission will not create new laws but will inform future legislation to strengthen the state's cyber security defenses.

Topics ✓ TechnologySupports TechnologyBill studies GDPR and assesses cybersecurity to develop recommendations for protecting personal information, directly aligning with data privacy and cybersecurity support indicators.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 1909: Establishes the New York state familial search policy and the release of information for familial DNA searches

Establishes the New York state familial search policy; relates to the release of certain information for familial DNA searches where a written agreement governing the use and dissemination of such DNA records exists.

Topics ✓ TechnologySupports TechnologyBill requires written agreement for DNA record release, a data privacy safeguard for biometric information in familial searches.80% confidence

Sub-Topics Consumer Data Protection

Track

in committee · New York · Senate Jan 7, 2026

S 3344: Establishes a commission to study cyber security in the state

S 3344 creates a 11-member commission within New York's Office of Information Technology Services to study the European Union's GDPR and assess the state's current cybersecurity posture. The commission will examine protections for critical infrastructure - including electrical grids, transportation systems, and financial networks - and develop recommendations to strengthen online data privacy for New York residents. It must submit a report to the governor and legislature within one year, using EU standards as a model. This bill directly affects state government agencies and private sector entities operating critical infrastructure, but does not enact new laws - it focuses solely on research and recommendations.

Topics ✓ TechnologySupports TechnologyBill creates commission to study GDPR and strengthen cybersecurity/data privacy protections for critical infrastructure and residents, directly aligning with support indicators.95% confidence

Sub-Topics Consumer Data Protection Cybersecurity Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 6974: Enacts the Stop Addictive Feeds Exploitation (SAFE) for all act

Enacts the "Stop Addictive Feeds Exploitation (SAFE) for all act"; requires a setting which allows a social media user to turn off algorithmic recommendations and other notifications; prohibits the use of dark patterns to subvert choice or inhibit users from accessing certain mechanisms.

Topics ✓ TechnologySupports TechnologyRequires social media platforms to disable algorithmic recommendations and ban dark patterns, enhancing user control over data privacy and preventing manipulative design.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track

in committee · New York · Assembly Jan 7, 2026

A 8614: Requires all state entities to notify affected individuals in the event of a data breach where information is compromised

Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".

Topics ✓ TechnologySupports TechnologyMandates breach notifications for state entities, strengthening data privacy protections under cybersecurity standards.95% confidence

Sub-Topics Consumer Data Protection Cybersecurity

Track

failed · New York · Assembly May 19, 2026

A 5239: Increases security on digital submissions to the state by requiring the use of verified accounts and multi-factor authorization

This bill requires all state agencies handling digital submissions (like forms or documents) to implement two security measures. First, users must create verified accounts using detailed personal information (name, address, date of birth, and two ID types like SSN or driver's license) and validate it. Second, users must use two-step verification (e.g., password + security code or biometrics) to access their accounts. These requirements apply to anyone submitting information online to state agencies, directly affecting residents and businesses using digital state services. The law takes effect one year after enactment, with agencies allowed to update rules immediately for implementation.

Topics ✓ TechnologySupports TechnologyRequires verified accounts and MFA for state digital submissions, enhancing cybersecurity and data protection per bill summary.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jun 3, 2026

A 7172: Relation to the regulation of the use of artificial intelligence and facial recognition technology in criminal investigations

Requires the division of criminal justice services to promulgate a written protocol for the regulation of the use of artificial intelligence and facial recognition technology in criminal investigations.

Topics ✓ Criminal JusticeSupports Criminal JusticeRegulates AI/facial recognition in investigations and restricts AI outputs in court to protect civil rights and enhance oversight, aligning with criminal justice reform indicators.95% confidence ✗ TechnologyOpposes TechnologyRestricts AI-generated evidence in court and mandates regulation of AI/facial recognition in criminal investigations, limiting technology use in legal context.90% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Emerging Technology

Track

in committee · New York · Assembly Jan 7, 2026

A 3629: Prohibits sharing or selling personal data to third parties by government entities and contractors

This bill prohibits New York state government agencies and their contractors from selling or sharing residents' personal data with third parties. It defines "personal information" broadly to include names, addresses, biometrics, and online identifiers, while allowing limited sharing for legitimate government purposes like public safety or services. Agencies must notify individuals when sharing data and ensure contractors cannot use the data for commercial purposes. The law does not apply to private companies, focusing solely on government data handling. It creates new rules for data protection within state operations, effective after legislative approval.

Topics ✓ TechnologySupports TechnologyProhibits government data sharing/selling, protecting personal privacy - key data privacy measure under tech policy95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 8101: Establishes the New York Data Protection Act

Establishes the New York Data Protection Act; requires government entities and contractors to disclose certain personal information collected about individuals.

Topics ✓ TechnologySupports TechnologyRequires government entities to disclose personal data collection, strengthening data privacy protections under the New York Data Protection Act.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly May 29, 2026

A 974: Relates to enacting the NY data protection act

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Topics ✓ TechnologySupports TechnologyRequires data transparency and consumer data sharing disclosures, strengthening privacy protections for New York residents.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track