Restricts the use by an employer or an employment agency of electronic monitoring or an automated employment decision tool to screen a candidate or employee for an employment decision unless such tool has been the subject of an impact assessment within the last year; requires notice to employment candidates of the use of such tools; provides remedies for violations.
This bill protects electronic toll and transit records (such as E-Z Pass and MetroCard data) from public disclosure. It applies to state/local agencies and their contractors managing these systems. Records can only be shared with the account holder for their own use, for law enforcement with valid warrants or subpoenas, to resolve billing disputes (e.g., unpaid tolls), or for specific NYC student discount verification. Aggregate data not identifying individuals remains public, and the bill explicitly excludes public disclosure under freedom of information laws.
Establishes the "broadband deployment assistance act"; requires that substantially similar permits for broadband deployment be processed together at the same time and on an expedited basis; defines terms; authorizes municipalities to simultaneously process certain broadband permit applications that are substantially similar.
Establishes requirements for the use of artificial intelligence, algorithm, or other software tools in utilization review and management; defines artificial intelligence.
A 1157 (2025) requires businesses handling New York residents' personal data - such as names, Social Security numbers, or financial details - to notify affected individuals within five days of discovering a security breach, replacing a previous 30-day deadline. This applies to any breach involving "private information" stored in computerized systems. The law maintains existing exceptions for law enforcement investigations but shortens the disclosure window significantly. The bill amends New York's general business law to enforce this faster notification requirement.
This bill requires businesses in New York to disclose when prices are set using algorithms that rely on personal data, mandating the clear statement "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA" alongside any personalized pricing offer. It directly affects businesses selling goods or services to consumers (excluding insurers and financial institutions like banks or credit card companies). Key provisions ban the use of protected class data - such as race, gender, or age - to set different prices, preventing discriminatory pricing practices. The law empowers the state attorney general to enforce compliance through injunctions and impose civil penalties of up to $1,000 per violation.
Establishes the New York Data Protection Act; requires government entities and contractors to disclose certain personal information collected about individuals.
Creates privacy standards for electronic health products and services; requires consent to be given for the collection and/or sharing of personal health information or other personal data.
Requires that businesses that provide consumers with online accounts to access services accounts for mobile telephones using proper identification if the business has a physical presence in this state.
Directs the public service commission to formulate a process, rules and regulations for the regulation of the charges and fees of internet and cable providers.
