Technology (Data Privacy)

signed · New York · Senate Jun 26, 2025

S 7672: Relates to municipal cybersecurity incidents or ransomware attacks

Requires all municipal corporations to report cybersecurity incidents and demands of ransom payments to the division of homeland security and emergency services; defines terms; requires cybersecurity incident reviews; requires cybersecurity awareness training, cybersecurity protection and data protection standards for state maintained information systems.

Topics ✓ TechnologySupports TechnologyBill mandates cybersecurity standards, incident reporting, and data protection for municipal systems, strengthening cybersecurity and data privacy protections.95% confidence

Sub-Topics Cybersecurity Data Privacy

in committee · New York · Senate Jan 7, 2026

S 269: Establishes an electronic monitoring program for children diagnosed with developmental disabilities

This bill establishes a voluntary program allowing parents or guardians of children diagnosed with developmental disabilities to obtain GPS tracking devices. It requires the child's consent when they are capable of understanding, and strictly limits device use to locating a child who is lost, missing, or unaccounted for. Law enforcement may access location data only after the parent requests help and signs a consent form. The program mandates confidentiality for all personal information and requires law enforcement to receive training on developmental disabilities and appropriate response techniques. It does not create new requirements for children but provides a tool for families and agencies during emergencies.

Topics ✓ TechnologySupports TechnologyMandates confidentiality for location data and restricts law enforcement access, aligning with data privacy protections.90% confidence

Sub-Topics Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 2202: Relates to requiring consumer reporting agencies to provide a consumer's information to such consumer at no cost

This bill requires credit reporting companies to provide consumers with free access to all personal information they hold in their files upon request. It mandates that companies disclose the sources of the information (with limited exceptions for investigative reports) and the recipients of consumer reports within specific timeframes - two years for job-related requests and six months for other purposes. The law applies to any consumer who provides proper identification to request their data. Companies must provide this information at no cost, ensuring transparency about what data is collected and shared about individuals.

Topics ✓ TechnologySupports TechnologyRequires free consumer access to personal data and disclosure of sources, strengthening data privacy protections under technology policies.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 5005: Creates a private right of action for the breach of a consumer's identifying information

Relates to creating a private right of action for the breach of a consumer's identifying information such as their social security number, driver's license number, bank account number, credit or debit card number, personal identification number, automated or electronic signature, unique biometric data, account passwords or other information that can be used to access an individual's financial accounts or to obtain goods and services.

Topics ✓ TechnologySupports TechnologyBill creates private right of action for consumer data breaches, directly strengthening data privacy protections under technology policies.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 6383: Enables students to receive information from colleges and universities without disclosing their personally identifiable information

Enables students to receive information from colleges and universities without disclosing their personally identifiable information via an opt-in system.

Topics ✓ TechnologySupports TechnologyBill protects student data privacy via opt-in system, directly advancing data privacy safeguards in technology policy.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly May 11, 2026

A 6031: Establishes the biometric identifier privacy act

Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.

Topics ✓ TechnologySupports TechnologyRequires private entities to establish biometric data retention/destruction policies, directly protecting user privacy through data handling regulations.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 103: Enacts the "New York religious freedom act"

S 103, the "New York Religious Freedom Act," prohibits state and local agencies and law enforcement from collecting, sharing, or using personally identifiable information about individuals' religious beliefs, practices, or affiliations for government databases related to law enforcement or immigration. It specifically bans using public funds or resources to create or enforce such databases and restricts sharing religious data with federal authorities, except in limited cases like targeted criminal investigations with a clear link to the crime or for providing religious accommodations. The law also terminates existing agreements that conflict with these restrictions and clarifies that agencies may still share citizenship or immigration status information as permitted under federal law. This directly affects all New York state and local government agencies handling personal data.

Topics ✓ Criminal JusticeSupports Criminal JusticePrevents law enforcement from collecting religious data, protecting civil rights in criminal justice contexts per bill's prohibition on religious data use in databases.90% confidence ✓ ImmigrationSupports ImmigrationS 103 prohibits state/local agencies from collecting/sharing religious data for immigration databases and restricts sharing with federal authorities, limiting enforcement.95% confidence ✓ TechnologySupports TechnologyBill prohibits government collection/sharing of religious data, enhancing data privacy protections aligned with technology policy goals.85% confidence

Sub-Topics Citizenship & Naturalization Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 7754: Requires e-mail service providers to implement a procedure to authenticate an individual's identity when such individual creates an e-mail account

Requires e-mail service providers to implement a procedure to authenticate an individual's identity when such individual creates a new e-mail account.

Topics ✓ TechnologySupports TechnologyMandates identity authentication for email accounts, enhancing cybersecurity measures per topic indicators.92% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 4047: Relates to prohibiting the release of consumption data

Prohibits the release of a consumer's electrical or gas consumption data to any police officer, or private, local, state or federal law enforcement entity without a judicial court-ordered subpoena, warrant or the consumer's written consent.

Topics ✓ TechnologySupports TechnologyProhibits unauthorized law enforcement access to consumer utility data, strengthening data privacy protections per topic description.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 6867: Relates to the sale of personal information by an internet service provider

S 6867 requires internet service providers (ISPs) in New York to keep subscribers' personal information confidential unless the subscriber explicitly grants written or electronic permission to share it. The bill defines personal information broadly to include names, addresses, financial details, health data, online activity, and email addresses. ISPs must notify subscribers of these privacy rights and cannot charge extra fees for choosing not to share personal information. Subscribers can specifically request that their email address be kept confidential, and ISPs must honor such requests. Violations would result in fines of $500 to $1,000 per offense.

Topics ✓ TechnologySupports TechnologyBill mandates ISPs to protect subscriber data privacy via explicit consent, broad personal information definition, and prohibits opt-out fees - clearly advancing data privacy protections.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track