The "Digital Impersonation Prevention Act."

The "Digital Impersonation Prevention Act" (A4422) makes it a crime to knowingly impersonate a real person online without their consent, specifically when done to harm others, send unsolicited spam or ads, or access their personal contact list. It criminalizes creating fake email or social media accounts in someone else's name, altering digital messages to appear as if they came from another person, or using impersonation to transmit unsolicited commercial messages. Violators face fines up to $1,000, up to one year in jail, or both. Victims can also sue for $500 per incident plus additional damages and seek court orders to stop the impersonation. The law does not hold internet service providers liable unless they personally commit the impersonation.