New York 2025-2026 Regular Session

New York Assembly Bill A00974

Introduced
1/8/25  
Refer
1/8/25  
Report Pass
5/27/25  
Refer
5/27/25  

Caption

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Summary

Bill A00974, known as the New York Data Protection Act, aims to enhance consumer privacy rights by establishing a framework for the management and oversight of personal data. It grants New York consumers the right to be informed about how their personal data is collected, used, and shared by businesses. Key provisions include the right to access personal data, request corrections, and delete data, as well as mandates for businesses to implement reasonable data security measures and conduct regular assessments of their data practices. The bill also introduces penalties for violations and empowers the New York Attorney General to enforce compliance.

Impact

The enactment of this bill will significantly alter the landscape of data privacy in New York by imposing strict obligations on businesses that handle personal data. It will require companies to be transparent about their data practices, thereby enhancing consumer control over personal information. The bill preempts local laws regarding data privacy, establishing a uniform standard across the state. This could lead to increased compliance costs for businesses, particularly those that process large volumes of consumer data or engage in targeted advertising.

Sentiment

The sentiment surrounding Bill A00974 appears to be largely positive, as evidenced by the favorable vote of 15-0 in the Assembly Consumer Affairs and Protection Committee. Supporters argue that the bill is a necessary step towards protecting consumer privacy in an increasingly digital world. However, there may be concerns from businesses regarding the potential regulatory burden and compliance costs associated with the new requirements.

Contention

Notable points of contention may arise from businesses that fear the bill's requirements could hinder their operations or increase costs. Some stakeholders may argue that the bill could stifle innovation in data-driven industries by imposing stringent regulations. Conversely, privacy advocates support the bill, emphasizing the need for stronger consumer protections in the face of growing data collection and surveillance practices.

Companion Bills

NY S08524

Same As Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Previously Filed As

NY S08524

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY A08158

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY S00365

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY S03044

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY A04947

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY A1401

Exempts certain personal information and entities from certain requirements concerning notification and disclosure of personal data.

NY S2956

Exempts certain personal information and entities from certain requirments concerning notification and disclosure of personal data.

NY S3605

Expands "Daniel's Law" protections; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply.

NY A4436

Expands "Daniel's Law" protections; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply.

NY S2783

Expands protections under "Daniel's Law"; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply.

Similar Bills

No similar bills found.