S10290, titled the “Bossware and Oppressive Technology Act,” would significantly regulate employer use of workplace surveillance and algorithmic hiring/management tools in New York. The bill creates a new Labor Law article governing “electronic monitoring tools” and “automated employment decision tools,” defining both broadly to cover many forms of software, sensors, tracking systems, and AI-based decision aids used in employment. It requires employers to limit electronic monitoring to specific business purposes, use the least invasive means, provide detailed advance notice to workers and applicants, retain and disclose certain records, and delete monitored data after a set period unless informed consent is obtained.
The bill also places major restrictions on how employers may use the data and outputs from these tools. Employers would be barred from monitoring off-duty workers, using facial recognition, gait, voice, or emotion recognition, surveilling private areas such as bathrooms or breakrooms, or using monitoring data as the primary basis for hiring, promotion, discipline, compensation, or termination decisions without meaningful human oversight. For automated employment decision tools, employers would need an independent impact assessment before use and annually thereafter, with findings addressing validity, bias, disparate impact, and accessibility for people with disabilities. The bill also creates employee rights to access, correct, and challenge monitored data and tool-based decisions.
In addition to the new Labor Law article, the bill amends the Civil Rights Law notice provision for electronic monitoring so that employer notices must comply with the new article 35-A requirements. It establishes enforcement mechanisms through private lawsuits, attorney general action, administrative complaints, civil penalties, liquidated damages, attorneys’ fees, and joint and several liability for employers and tool vendors in some cases. The bill also authorizes the commissioner to issue rules, publish model notices, and maintain a public registry of impact assessments, while preserving local authority to adopt stronger protections.
The overall sentiment reflected by the bill text and caption is strongly protective of workers and applicants, with the legislation framed as a response to invasive surveillance and biased automated decision-making. Because there are no committee transcripts or recorded votes provided, there is no documented opposition or support in the available context; however, the bill’s structure suggests it is intended to curb employer discretion and increase transparency, accountability, and worker privacy. Its strongest policy emphasis is on preventing discrimination, limiting intrusive monitoring, and ensuring human review of consequential employment decisions.
Likely points of contention include the breadth of the monitoring restrictions, the cost and administrative burden of required impact assessments and recordkeeping, the limits on using data-driven productivity measures, and the potential exposure of employers and vendors to litigation and damages. Employers and technology vendors may object to the bill’s detailed notice requirements, public registry provisions, and bans on certain biometric or predictive tools, while worker advocates would likely support the bill’s privacy, anti-discrimination, and due-process protections.
The bill would add a new article 35-A to the Labor Law and conforming changes to the Civil Rights Law, creating a comprehensive state regulatory framework for workplace electronic monitoring and AI-based employment decision tools. It would impose new duties on employers and employment agencies to notify workers and candidates, limit surveillance practices, conduct independent impact assessments, preserve and disclose data, provide correction and reevaluation procedures, and use meaningful human oversight before relying on monitored data or automated outputs for employment decisions. It also expands enforcement through private rights of action, administrative enforcement, civil penalties, and liability for vendors in some circumstances, while allowing municipalities to adopt additional protections.
The bill’s tone and design are strongly pro-worker and privacy-focused, reflecting concern about invasive “bossware,” algorithmic bias, and opaque employment surveillance. No committee debate or vote record is provided, so there is no direct evidence of legislative support or opposition in the available materials. Based on the text alone, the bill appears intended to address civil rights, labor rights, and workplace privacy concerns rather than to facilitate employer flexibility.
The main likely points of contention are the bill’s broad limits on employer surveillance, the prohibition on facial recognition and similar biometric technologies, and the requirement for annual independent impact assessments before using automated employment decision tools. Employers and vendors may argue that the bill is operationally burdensome, costly, and may restrict legitimate uses such as productivity management, safety, compliance, and hiring efficiency. Worker advocates are likely to support the bill’s restrictions, especially the bans on off-duty monitoring, private-area surveillance, and reliance on automated outputs without human review, as well as the rights to notice, access, correction, and challenge.