Relates to enacting the "N.Y. state digital equity plan act"; requires the division of broadband access to develop a state digital equity plan to increase broadband access to underserved populations by January 1, 2027.
S 681 prohibits most private employers from requiring fingerprinting or mandatory iris/retina scans as a condition of hiring or continued employment. It directly affects private-sector workers and employers, with key exceptions for state/municipal employees, public hospitals, medical colleges affiliated with public hospitals, and private hospitals. The bill amends labor law to make this prohibition explicit and takes effect immediately upon enactment. It does not apply to government workers or healthcare facilities receiving public funding.
Aligns state and local procurement laws with federal law prohibiting the procurement of certain technology and electronic parts or products which are determined to pose a risk to state and national security; relates to the authority of the office of information technology services to issue certain guidance relating thereto.
Requires advertisements to disclose the use of a synthetic performer; imposes a $1,000 civil penalty for a first violation and a $5,000 penalty for any subsequent violation.
Provides that organ donation registrations through an electronic health record product do not retain or store patients' donor status information and meet standards established by the commissioner; amends the effective date.
This bill (A 428) protects New York users of paid online dating services by setting clear consumer safeguards. It limits subscription contracts to $1,000 total (with exceptions for short-term plans), bans requiring forced add-on services (like grooming), and guarantees a minimum number of matches per month for paid plans over $25. Users gain the right to cancel without penalty if matches aren't delivered for two months, receive a refund (minus a small fee), and get their personal data deleted or returned upon cancellation. The law directly affects all paid online dating platforms operating in New York, ensuring transparency and reducing deceptive practices.
S 804 amends New York's data breach notification law to clarify when and how financial institutions must notify the Department of Financial Services (DFS) after a breach affecting New York residents. It requires covered financial institutions (as defined by current DFS rules) to provide DFS with details about the breach - including timing, content, and number of affected people - without delaying direct notifications to consumers. The bill specifies that this notification to DFS is only mandatory for financial institutions, not all businesses, and must follow existing DFS reporting rules (23 NYCRR 500.17). The law, signed as Chapter 91 on February 14, 2025, streamlines reporting for regulated financial entities while maintaining direct consumer notification timelines.
Directs that state agencies require that procurement of end point devices be consistent with any relevant standards, guidelines, or guidance developed as part of the National Institute of Standards and Technology (NIST) Cybersecurity Framework.
This bill expands the legal definition of "personal identifying information" to explicitly include medical information and health insurance details. It directly affects individuals whose medical history, treatment records, or health insurance policy numbers could be misused, as these now count as sensitive data under identity theft laws. Key provisions add specific definitions: "medical information" covers health history and treatment, while "health insurance information" includes policy numbers and claims history. The bill modifies existing penal, business, and technology laws to incorporate these changes, removing prior related provisions through repeal. This update strengthens protections by making unauthorized use of health data prosecutable under current identity theft statutes.
S 778 regulates online dating services in New York by setting consumer protections and pricing limits. It caps two-year membership costs at $1,000 (with exceptions for one-year contracts), bans requiring ancillary services (like photo sessions) as a condition of use, and mandates a minimum number of matches per month for paid accounts over $25. If services fail to deliver the promised matches for two consecutive months, users can cancel and receive a refund (minus a small fee for services provided). The bill also grants a three-day cooling-off period for cancellations without penalty and requires dating platforms to return or destroy user data upon contract end.