Technology (Data Privacy)

passed · New York · Senate Jan 14, 2025

J 29: Memorializing Governor Kathy Hochul to proclaim January 28, 2025, as Human Data Privacy Day in the State of New York

This is a procedural resolution (J 29) asking Governor Hochul to officially recognize January 28, 2025, as "Data Privacy Day" in New York State. It does not create new laws or regulations but seeks to raise public awareness about data privacy protections, aligning with the national observance. The resolution highlights the importance of protecting personal data online and preventing identity theft, referencing the historical significance of Data Privacy Day. It directly affects New Yorkers through increased public education efforts on data security.

Topics ✓ TechnologySupports TechnologyBill designates Data Privacy Day to promote awareness of data protection, directly aligning with privacy advocacy and preventing identity theft as stated in summary.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 7719: Establishes a commission to study cyber security in the state

This bill establishes a 11-member commission within New York's Office of Information Technology Services to study the European Union's GDPR (General Data Protection Regulation) and assess the state's current cyber security landscape. The commission will examine critical infrastructure sectors - including financial systems, electrical grids, transportation, and first responder networks - to develop recommendations for protecting online personal information. The group must submit a report to the governor and legislature within one year, evaluating EU models and New York-specific cyber threats like hacking and cybercrime. The commission will not create new laws but will inform future legislation to strengthen the state's cyber security defenses.

Topics ✓ TechnologySupports TechnologyBill studies GDPR and assesses cybersecurity to develop recommendations for protecting personal information, directly aligning with data privacy and cybersecurity support indicators.90% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 3344: Establishes a commission to study cyber security in the state

S 3344 creates a 11-member commission within New York's Office of Information Technology Services to study the European Union's GDPR and assess the state's current cybersecurity posture. The commission will examine protections for critical infrastructure - including electrical grids, transportation systems, and financial networks - and develop recommendations to strengthen online data privacy for New York residents. It must submit a report to the governor and legislature within one year, using EU standards as a model. This bill directly affects state government agencies and private sector entities operating critical infrastructure, but does not enact new laws - it focuses solely on research and recommendations.

Topics ✓ TechnologySupports TechnologyBill creates commission to study GDPR and strengthen cybersecurity/data privacy protections for critical infrastructure and residents, directly aligning with support indicators.95% confidence

Sub-Topics Consumer Data Protection Cybersecurity Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 6974: Enacts the Stop Addictive Feeds Exploitation (SAFE) for all act

Enacts the "Stop Addictive Feeds Exploitation (SAFE) for all act"; requires a setting which allows a social media user to turn off algorithmic recommendations and other notifications; prohibits the use of dark patterns to subvert choice or inhibit users from accessing certain mechanisms.

Topics ✓ TechnologySupports TechnologyRequires social media platforms to disable algorithmic recommendations and ban dark patterns, enhancing user control over data privacy and preventing manipulative design.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Social Media

Track

in committee · New York · Senate Jan 7, 2026

S 3702: Relates to a tax on gross income upon every corporation which derives income from the data individuals of this state share with such corporations

Requires a five percent tax on gross income upon every corporation which derives income from the data individuals of this state share with such corporations; establishes the New York data fund to distribute the earnings of the five percent to each taxpayer of the state.

Topics ✓ Budget & TaxesSupports Budget & TaxesImposes 5% tax on corporations using state residents' data, creating new revenue stream distributed to taxpayers via New York Data Fund.95% confidence ✓ TechnologySupports TechnologyTax on corporations monetizing personal data regulates data exploitation, aligning with data privacy protection and consumer-centric regulation.90% confidence

Sub-Topics Business Taxes Data Privacy

Track

failed · New York · Assembly May 19, 2026

A 5239: Increases security on digital submissions to the state by requiring the use of verified accounts and multi-factor authorization

This bill requires all state agencies handling digital submissions (like forms or documents) to implement two security measures. First, users must create verified accounts using detailed personal information (name, address, date of birth, and two ID types like SSN or driver's license) and validate it. Second, users must use two-step verification (e.g., password + security code or biometrics) to access their accounts. These requirements apply to anyone submitting information online to state agencies, directly affecting residents and businesses using digital state services. The law takes effect one year after enactment, with agencies allowed to update rules immediately for implementation.

Topics ✓ TechnologySupports TechnologyRequires verified accounts and MFA for state digital submissions, enhancing cybersecurity and data protection per bill summary.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 404: Prohibits the use of reverse location and reverse keyword searches

Prohibits the search, with or without a warrant, of geolocation and keyword data of a group of people who are under no individual suspicion of having committed a crime, but rather are defined by having been at a given location at a given time or searched particular words, phrases, character strings, or websites.

Topics ✓ Criminal JusticeSupports Criminal JusticeProhibits warrantless mass data collection, protecting civil liberties and enhancing police accountability in criminal investigations.95% confidence ✓ TechnologySupports TechnologyProhibits warrantless bulk geolocation/keyword searches, directly protecting user privacy - a core technology policy indicator.95% confidence

Sub-Topics Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 3629: Prohibits sharing or selling personal data to third parties by government entities and contractors

This bill prohibits New York state government agencies and their contractors from selling or sharing residents' personal data with third parties. It defines "personal information" broadly to include names, addresses, biometrics, and online identifiers, while allowing limited sharing for legitimate government purposes like public safety or services. Agencies must notify individuals when sharing data and ensure contractors cannot use the data for commercial purposes. The law does not apply to private companies, focusing solely on government data handling. It creates new rules for data protection within state operations, effective after legislative approval.

Topics ✓ TechnologySupports TechnologyProhibits government data sharing/selling, protecting personal privacy - key data privacy measure under tech policy95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 8101: Establishes the New York Data Protection Act

Establishes the New York Data Protection Act; requires government entities and contractors to disclose certain personal information collected about individuals.

Topics ✓ TechnologySupports TechnologyRequires government entities to disclose personal data collection, strengthening data privacy protections under the New York Data Protection Act.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly May 29, 2026

A 974: Relates to enacting the NY data protection act

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Topics ✓ TechnologySupports TechnologyRequires data transparency and consumer data sharing disclosures, strengthening privacy protections for New York residents.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track