New York 2025-2026 Regular Session

New York Senate Bill S08524

Introduced
10/8/25  
Refer
10/8/25  

Caption

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Impact

The implementation of S08524 will have a profound effect on existing laws related to data privacy in New York. It will require companies to adopt more responsible and transparent data management practices, which could lead to increased compliance costs. Businesses will need to ensure that they uphold the rights granted to consumers under this act, which may influence operational processes and strategies. Furthermore, the establishment of a state-wide registry for data brokers and the requirement for them to disclose their practices will empower consumers and enhance state oversight over private data usage. This shift towards heightened regulations may contribute to changing the landscape of consumer data rights and corporate accountability.

Summary

Bill S08524, known as the New York Data Protection Act, aims to enhance consumer privacy and control over personal data collected by companies. The bill establishes several key rights for consumers, including the right to access their data, correct inaccuracies, and delete personal information. Additionally, it stresses transparency from businesses regarding the use and sharing of consumer data, mandating clear disclosures about data practices, including how data is de-identified. This act represents a significant step towards regulating how personal data is managed in New York State, reflecting growing concerns about digital privacy and consumer rights.

Contention

Notably, S08524 has sparked debate among various stakeholders. Proponents argue that the act will provide necessary protections for consumers who have historically lacked control over their personal data. They emphasize the importance of adapting to technological advancements that have outpaced current privacy laws. Conversely, critics, particularly from the business sector, express concerns about the administrative burden this legislation could impose. They argue that the requirements might stifle innovation and impose excessive costs on businesses, particularly smaller enterprises that lack the resources to comply with complex legislation. This tension reflects the broader national dialogue about privacy and regulation in the digital age.

Companion Bills

NY A00974

Same As Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Previously Filed As

NY A08158

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY A00974

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY S03044

Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY A04947

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

NY A08906

Requires entities that access a consumer's consumer credit report to notify such consumer of their right to obtain a security freeze, in addition to other information necessary to place, temporarily lift or permanently lift such security freeze; prohibits notices to consumers of their right to obtain a security freeze from containing advertising for paid services.

NY S09658

Establishes a private right of action for any person whose personally identifying information was intentionally disclosed by another individual, without consent, for the purpose of harassing, threatening, intimidating, or causing harm to such person, or with reckless disregard as to whether such disclosure would cause such harm; defines personal information.

NY A10091

Establishes a private right of action for any person whose personally identifying information was intentionally disclosed by another individual, without consent, for the purpose of harassing, threatening, intimidating, or causing harm to such person, or with reckless disregard as to whether such disclosure would cause such harm; defines personal information.

NY A08101

Establishes the New York Data Protection Act; requires government entities and contractors to disclose certain personal information collected about individuals.

NY S09672

Restricts the disclosure of personal information by businesses; provides that a business that retains a customer's personal information shall make available to the customer free of charge access to, or copies of, all of the customer's personal information retained by the business.

NY S3605

Expands "Daniel's Law" protections; requires Office of Information Privacy to establish portal for prohibiting disclosure of personal information by private entities and establishes penalties for failure to comply.

Similar Bills

No similar bills found.