Relates to the unlawful use of a New York driver's license or identification card.
This bill would create a new section of the General Business Law restricting when private parties may scan the machine-readable zone of a New York State driver’s license or identification card. It allows scanning only for specified purposes, including verifying authenticity or identity in certain transactions, confirming age for age-restricted goods or services, preventing fraud in returns or exchanges, complying with state or federal recordkeeping requirements, transmitting information to consumer reporting agencies, financial institutions, or debt collectors under applicable federal laws, and certain HIPAA-covered medical privacy uses.
The bill also limits what information may be collected from a scan to name, address, date of birth, and license or ID number; prohibits retaining information except as allowed; and bars selling or sharing the information with third parties for marketing, advertising, or promotional purposes. Covered businesses must make reasonable efforts to comply, waivers of the protections are void, and each violation may result in a civil penalty of up to $1,000. The bill also amends the Alcoholic Beverage Control Law to align alcohol-licensee scanning practices with the new General Business Law restrictions.
The bill would add new consumer privacy restrictions to New York law governing the use of scanned driver’s license and ID card data by businesses and other private entities, while expressly excluding the state and its political subdivisions. It would also modify the Alcoholic Beverage Control Law so that alcohol licensees and their employees must use scanned ID information consistently with the new General Business Law section, replacing the prior standalone language with a cross-reference to the new rules. The practical effect is to narrow data collection, retention, and resale practices involving ID scans and to create a civil enforcement mechanism for violations.
The available record shows no committee transcript or vote history, so there is no direct evidence of debate or formal support/opposition. Based on the bill text, the measure appears to be framed as a consumer privacy and anti-misuse bill, suggesting a protective policy goal rather than a controversial regulatory expansion. The absence of recorded votes or discussion prevents a more specific assessment of legislative sentiment.
The main potential points of contention are likely to involve the scope of permitted scanning and the compliance burden on businesses that rely on ID scanning for age verification, fraud prevention, returns processing, or identity checks. Businesses, especially retailers, bars, and service providers, may be concerned about operational limits, data-handling obligations, and civil penalties. On the other hand, consumer privacy advocates would likely support the restrictions on retention and third-party sharing, particularly the ban on using scanned ID data for marketing or advertising. The bill’s exceptions for financial, credit, medical, and legal compliance uses may also be a focus if stakeholders argue they are either too broad or too narrow.