Requires the consumer protection division to establish a process by which any state agency or third party, pursuant to an interagency agreement with the division for the purposes of fraud prevention, identity verification, and ensuring the integrity or security of individual identities, to grant access to verify New York resident identities via a secure comparison process against state systems.
Summary
This bill amends the executive law to expand the powers of the consumer protection division by authorizing it to establish a secure identity-verification process for state agencies or third parties operating under interagency agreements. The process is intended for fraud prevention, identity verification, and protecting the integrity and security of individual identities. It would allow verification of New York resident identities through a secure comparison against state systems, while requiring auditable user consent, keeping data and images within state systems, converting facial images into mathematical representations, and using vendors that meet specified NIST testing and ISO liveness-detection standards.
The bill also provides that any revenue generated from these authorized agreements must be deposited into the state general fund through the comptroller. In addition, identity verification service providers would be prohibited from retaining IP addresses, geolocation data, or other information revealing the location or device used by an applicant. The act would take effect immediately upon enactment.
Impact
The bill would amend section 94-a of the executive law to add new authority for the consumer protection division to manage identity-verification agreements and set privacy and security requirements for those systems. It would affect state agencies and any third-party vendors participating in such agreements, while also directing related revenue to the general fund and restricting data retention practices by service providers.
Sentiment
No committee transcript or vote record is available, so there is no direct evidence of debate, support, or opposition in the provided materials. Based on the bill text alone, the measure appears to be framed as a consumer-protection and anti-fraud initiative with strong privacy and security safeguards.
Contention
The main policy issues likely concern the use of biometric or facial-image-based identity verification, the scope of state access to resident identity data, and the involvement of third-party vendors in a state verification process. Potential points of contention include whether the safeguards are sufficient, whether the state should rely on facial recognition or similar technologies, and how broadly agencies may use the new interagency agreement authority. The bill also raises questions about vendor compliance, oversight, and the handling of any revenue generated from these agreements.
Same As
Requires the consumer protection division to establish a process by which any state agency or third party, pursuant to an interagency agreement with the division for the purposes of fraud prevention, identity verification, and ensuring the integrity or security of individual identities, to grant access to verify New York resident identities via a secure comparison process against state systems.
Requires the consumer protection division to establish a process by which any state agency or third party, pursuant to an interagency agreement with the division for the purposes of fraud prevention, identity verification, and ensuring the integrity or security of individual identities, to grant access to verify New York resident identities via a secure comparison process against state systems.
Enacts the New York state food security purchase and processing act to establish a state-level program that purchases food grown or raised by New York farmers; requires processing within New York State; distributes such food to communities in need.
Enacts the New York state food security purchase and processing act to establish a state-level program that purchases food grown or raised by New York farmers; requires processing within New York State; distributes such food to communities in need.
Requires hospitals to establish a violence prevention program which includes a workplace safety and security assessment and develop a safety and security plan that addresses identified workplace violence threats or hazards.
Requires hospitals to establish a violence prevention program which includes a workplace safety and security assessment and develop a safety and security plan that addresses identified workplace violence threats or hazards.
Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.
Relates to the disclosure of third-party consumer litigation financing agreements in which there is a right to receive compensation or proceeds from the consumer that is contingent on and sourced from any proceeds of the civil action, by settlement, judgment, or otherwise.
Requires the consumer protection division to promulgate a policy governing the use of automatic license plate reader systems by non-law enforcement agencies and non-government entities; requires such non-law enforcement agencies and non-government entities to conspicuously post such policy on their website or in their place of business.
Requires the consumer protection division to promulgate a policy governing the use of automatic license plate reader systems by non-law enforcement agencies and non-government entities; requires such non-law enforcement agencies and non-government entities to conspicuously post such policy on their website or in their place of business.
Provides for the protection of health information; establishes requirements for communications to individuals about their health information; requires either written consent or a designated necessary purpose for the processing of an individual's health information.