Relates to enacting the NY privacy act

Latest action Jan 7, 2026

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Not chosen yet

Where it stands

Out of committee and scheduled for a vote by the full chamber.

Introduced
In committee
Up for a vote
Passed one chamber
Passed
Enacted

New York State Senate

Same as A8158, the matching bill in the Assembly.

Amends the General Business Law.

Committee

Consumer Affairs and Protection · New York State Assembly

Also referred to Internet And Technology · New York State Senate.

Purpose, from the sponsor's memo

Section 1 of the bill provides the name of the act, the "New York Priva- cy Act". Section 2 of the bill contains the legislative intent. Section 3 of the bill amends the general business taw by adding a new article 42-A. Section 1200 of the new article 42-A provides definitions of relevant terms to be used in this act. Section 1201 of the new article 42-A sets out the jurisdictional scope of this article . Section 1202 of the new article 42-A delineates consumer rights includ- ing notice of how data is being used, the right to opt-out of data proc- essing, a requiring opt-in for processing sensitive data, the right to request access and obtain a copy of their data, the right to request the correction of inaccurate data and the right to deletion of data. Section 1203 of the new article 42-A defines the responsibilities and obligations of controllers, processors and third parties. Section 1204 of the new article 42-A requires data brokers to register and pay an annual fee to the Attorney General, and to submit information regarding the data broker's data use practices and contact information. Section 1205 of the new article 42-A describes situations when control- lers and processors may be exempt from compliance with the obligations in this article. Section 1206 of the new article 42-A provides for enforcement by the Attorney General. Section 1207 of the new article 42-A contains miscellaneous provisions, including a conflict preemption clause, timing for the Attorney General to submit a report on the effectiveness of the article, regulatory authority for the Attorney General, and how consumers can exercise their rights under this article. Section 4 of the bill provides that the act will take effect immediate- ly, provided that sections 1201, 1202, 1203, 1205, 1206 and 1207 of the general business law, as added by section three of this act, shall take effect one year after the effective date.

Filed with the bill. Read it on nysenate.gov (opens in a new tab)

Recorded votes

Vote: Committee vote · Internet And Technology
Senate Internet And TechnologyMay 27, 2025Result: passed
(6) (1) (0) (0)

Cosponsors

James Sanders Jr., Jo Anne Simon and 1 more on Agora

Democratic3

See the full list on nysenate.gov

The sponsor's argument

Why Kristen Gonzalez says this is needed

According to a Pew survey from 2018, 69% of American adults use at least one social media platform, up from 5% in 2005. Americans use these plat- forms to engage with friends and family, to connect with social and political organizations, and to follow news and current events. Despite the platforms' usefulness, many social media users have reservations about the handling of their personal information. A 2014 Pew survey found that 91% of Americans believe that people have lost control over how their personal information is collected and used. Some 80% of social media users said they were concerned about advertisers and businesses accessing and using data that they share on social media platforms. Around 64% of people in this survey also said that the government should do more to address this issue. Social media companies obtain their revenues through targeted advertis- ing based on users' likes, shares, searches, phone numbers, emails, and other information provided while they use these platforms. According to The New York Times, some of the largest social media companies fail to inform or obtain consent from users regarding the sharing of their personal data. In some instances, these social media companies share the information of hundreds of millions of users without notifying them. It also found that if users were to choose the most restrictive privacy settings made available, their personal data was stilt shareable with some external companies or affiliates. According to these large social media companies, any information shared on these platforms can be given to other companies without any additional consent. Currently, there are no federal regulations addressing this privacy issue, and the few attempts at self-regulation by these companies fall welt short of addressing consumers' concerns. New York must join the growing number of other states to fill this void.

This is the sponsor's own case for the bill, quoted from their memorandum. It is not Agora's description of what the bill does.

Full history

Jan 7, 2026
Referred to committee
REFERRED TO CONSUMER AFFAIRS AND PROTECTION
NY Assembly
Jan 7, 2026
Referred to committee
REFERRED TO INTERNET AND TECHNOLOGY
NY Senate
May 29, 2025
Reported out of committee
REPORTED AND COMMITTED TO FINANCE
NY Senate
May 2, 2025
Referred to committee
REFERRED TO CONSUMER AFFAIRS AND PROTECTION
NY Assembly
Jan 23, 2025
Referred to committee
REFERRED TO INTERNET AND TECHNOLOGY
NY Senate

About this record

Summary: The summary comes from NY Open Legislation, the New York State Senate's public record. For more, see How we handle summaries.
Cosponsors: The list shows the cosponsors who are on Agora, A to Z. The official record may list more.
Party colors: Parties are shown in the same neutral colors.
Source: From NY Open Legislation, the NY Senate and Assembly, and official rosters. This record was last updated Nov 3, 2026. About our data

Read the record

Read on NY Senate (opens in a new tab) The official record on nysenate.gov.

Your position