BILL NUMBER: S9088
SPONSOR: GONZALEZ
 
TITLE OF BILL:
An act to amend the general business law, in relation to requiring the
registration of data brokers and establishing a data deletion mechanism
for consumers
 
PURPOSE OR GENERAL IDEA OF BILL:
To protect New York consumers' privacy by requiring data brokers to
register with the Attorney General and by creating a centralized, acces-
sible mechanism that allows consumer to delete their personal informa-
tion held by data brokers.
 
SUMMARY OF PROVISIONS:
This bill amends the General Business Law by adding a new Article 42-A
to regulate data brokers operating in New York State.
Section 1 amends the General Business Law by adding a new Article 42-A,
entitled "Data Brokers," to establish requirements for the registration
of data brokers with the Attorney General, create a statewide data
deletion mechanism for consumers, mandate compliance audits, and provide
enforcement authority and civil penalties for violations.
Section 2 sets the effective date.
 
JUSTIFICATION:
Data brokers collect and sell vast amounts of personal information about
New Yorkers-often without consumers' knowledge or consent. This informa-
tion can include sensitive data such as precise location, biometric
identifiers, health information, immigration status, and other deeply
personal details. The unchecked sale and sharing of this data poses
serious risks to privacy, consumer safety, and civil rights.
While consumers are increasingly concerned about how their data is used,
there is currently no centralized or effective way for New Yorkers to
identify data brokers or to request deletion of their personal informa-
tion across the industry. This bill addresses that gap by establishing
transparency through registration and accountability through a uniform
deletion process.
By empowering the Attorney General to oversee data brokers and by giving
consumers meaningful control over their personal data, this legislation
strengthens privacy protections, reduces the risk of data misuse, and
aligns New York with emerging national standards for consumer
protection.
 
PRIOR LEGISLATIVE HISTORY:
New bill
 
FISCAL IMPLICATIONS FOR STATE AND LOCAL GOVERNMENTS:
The bill allows the Attorney General to collect reasonable registration
and access fees from data brokers to offset the costs of establishing
and maintaining the registry and data deletion mechanism. No significant
additional costs to the state are anticipated.
 
EFFECTIVE DATE:
This act shall take effect immediately.