Relates to data broker regulation; prohibits the acquisition of personally identifiable information through fraudulent means; requires a data broker to develop, implement, and maintain a comprehensive information security program; requires data brokers operating in the state of New York to register with the attorney general.
Impact
If enacted, S09131 will significantly amend the laws governing data privacy and protection in New York. Data brokers will be required to adhere to strict data security protocols, and the Attorney General will gain additional authority to enforce compliance through civil penalties. The bill promotes transparency and accountability in the data broker industry by ensuring that consumers are aware of how their data is collected and used. The impact on state laws will mainly involve enhanced oversight of data practices, potentially affecting how businesses handle consumer information and privacy overall.
Summary
S09131 aims to regulate data brokers in the state of New York, stipulating that they must not acquire personally identifiable information (PII) through fraudulent means and must establish a comprehensive information security program. This bill highlights the responsibilities of data brokers in terms of protecting consumer data, which involves implementing various technical and administrative safeguards, and mandates their registration with the Attorney General's office. Notably, it requires data brokers to provide opt-out provisions for consumers, allowing them to limit the collection and sale of their personal information.
Contention
The discussions surrounding S09131 may touch upon issues of consumer rights versus business interests. While proponents argue that the bill strengthens consumer protection and addresses rising concerns about identity theft and data privacy, opponents may raise concerns about the cost of compliance for data brokers and the potential for stifling innovation in data usage practices. Additionally, questions about the effectiveness of such regulations in truly protecting consumer data may also arise, particularly in light of advancements in technology and data analytics.
Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.
Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.
A bill for an act relating to the license application form for real estate brokers and salespersons, and brokerage agreement requirements. (Formerly SF 15.) Effective date: 07/01/2025.