Technology (Consumer Data Protection)

in committee · New York · Senate Jan 7, 2026

S 7269: Relates to the security of connected devices

This bill requires manufacturers selling connected devices (like smart home gadgets or wearables) in New York to include reasonable security features. It mandates that security measures must be appropriate for the device's function and the data it handles, specifically to prevent unauthorized access, hacking, or data breaches. Key provisions include requiring unique default passwords or forcing users to set new login credentials during first use. The law explicitly excludes federal-regulated devices, HIPAA-covered health devices, third-party apps, and user modifications to device software. It does not create private lawsuits but grants enforcement authority solely to the Attorney General.

Topics ✓ TechnologySupports TechnologyMandates security features like unique passwords to prevent breaches, directly enhancing cybersecurity and data privacy protections for connected devices.95% confidence

Sub-Topics Consumer Data Protection

Track

in committee · New York · Assembly Jan 7, 2026

A 1813: Relates to collection, storage or transmission of personal information collected from smart home systems

Requires express and affirmative consent prior to collection, storage or transmittal of any personal information obtained from the installation or use of a smart home connected system by certain persons.

Topics ✓ TechnologySupports TechnologyRequires express consent for smart home data collection, strengthening privacy protections per bill summary.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 8729: Relates to protecting safety and privacy by stopping the sale of location data

Prohibits the collection or processing of an individual's location information except for a permissible purpose; requires an entity collecting location information for the provision of multiple permissible purpose to maintain a location privacy policy obtain consent from the individual the information pertains to; prohibits the disclosure or sale of such information except for certain purposes; provides remedies for violations.

Topics ✓ TechnologySupports TechnologyProhibits location data sales and mandates consent, directly enhancing data privacy protections as a core technology policy.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 8624: Requires social media networks to provide and maintain mechanisms for deleting individual accounts on their platform

Requires social media networks to provide and maintain mechanisms for deleting individual accounts on their platform; requires social media networks to have a clear and concise policy readily available and accessible on their website and application which includes how such social media network will delete individual user accounts and all associated personal data on their platform.

Topics ✓ TechnologySupports TechnologyRequires social media to delete user accounts and personal data, directly enhancing data privacy protections as a core component of technology policy.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track

in committee · New York · Senate Jan 7, 2026

S 5156: Establishes the "It's Your Data Act"

Establishes the "It's Your Data Act" for the purposes of providing protections and transparency in the collection, use, retention, and sharing of personal information.

Topics ✓ TechnologySupports TechnologyBill establishes data privacy protections and transparency in personal information handling, directly supporting privacy safeguards under the topic.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 6656: Relates to requiring responsible capability scaling policies

This bill requires businesses operating in New York State that use artificial intelligence to create and submit "responsible capability scaling policies" to the Chief Information Officer (CIO). These policies must identify, monitor, and address potential harms from AI systems. Companies must file annual compliance certifications with the CIO, who can grant exemptions or designate covered entities, and the Attorney General may audit these policies. The law applies broadly to all businesses offering products or services to New York consumers using AI, with implementation starting 90 days after enactment.

Topics ✓ TechnologySupports TechnologyMandates AI harm monitoring policies, requires compliance certifications, aligns with consumer protection regulations for AI systems95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection

Track

in committee · New York · Senate Jan 8, 2025

S 963: Relates to automatic license plate readers

This bill requires New York law enforcement agencies to adopt minimum standards for using automatic license plate readers (ALPRs), directly affecting police departments that deploy these systems. It mandates agencies to develop policies covering permissible uses, data sharing, retention, and officer training, then publicly post these policies online or at their main offices. The bill also directs the council to recommend ongoing training programs for police officers on these policies and procedures. These requirements aim to standardize ALPR use and increase transparency for the public.

Topics ✓ Criminal JusticeSupports Criminal JusticeMandates transparency and accountability for police ALPR use, requiring public policies on data handling and officer training to protect civil rights and enhance oversight.90% confidence ✓ TechnologySupports TechnologyBill mandates data privacy standards for ALPRs including data sharing, retention policies, and public transparency - directly protecting digital privacy under technology policy.95% confidence

Sub-Topics Policing Consumer Data Protection

Track

in committee · New York · Senate Jan 7, 2026

S 6873: Relates to the use of voice recognition features on certain products

This bill requires companies selling voice-enabled devices (like smart speakers, TVs, or children's toys) to clearly inform users during setup that the device may record voice data. It bans companies from selling or using these voice recordings for advertising, whether the recordings are collected by the device manufacturer or a third party. The law also protects manufacturers from liability for third-party apps users choose to install. Violations can result in fines up to $2,500 per incident, enforced by New York's Attorney General. The bill directly affects device manufacturers and users of voice-recognition technology in New York.

Topics ✓ TechnologySupports TechnologyRequires disclosure of voice recording, bans use of recordings for advertising, and protects user data privacy - clear consumer protection measure in tech regulation.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

passed · New York · Senate Jun 3, 2026

S 1422: Establishes the biometric identifier privacy act

Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.

Topics ✓ TechnologySupports TechnologyBill mandates destruction of biometric data by private entities, directly strengthening data privacy protections under technology policy.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

passed · New York · Assembly Jan 28, 2025

K 57: Memorializing Governor Kathy Hochul to proclaim January 27-31, 2025, as Data Privacy Week in the State of New York

This is a ceremonial resolution (not a bill) requesting Governor Hochul to proclaim January 27-31, 2025, as Data Privacy Week in New York. It aims to raise public awareness about protecting personal data online and encourages responsible data practices by businesses, aligning with National Data Privacy Week. The resolution does not create new laws or regulations - it simply asks the Governor to issue a formal proclamation recognizing the week. It directly affects all New Yorkers by promoting education on data privacy through state-level recognition.

Topics ✓ TechnologySupports TechnologyThe bill aims to raise public awareness about protecting personal data online and encourages responsible data practices, directly supporting data privacy within the Technology topic.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track