New York A 1813: Relates to collection, storage or transmission of personal information collected from smart home systems

Bill Text

Bill Search and Legislative Information | New York State Assembly 

• 

• 

• 

• 

• 

• 

• 

• 

 Skip to main content 

 New York State Assembly

 Speaker Carl E. Heastie

 --> 
 --> 

 --> 

• 
 Assembly Members 

• 
 Legislative Info 

• 
 Public Hearings 

• 
 Speaker's Press 

• 
 Assembly Reports 

• 
 Committees & More 

• Bill Search Home
• Laws
• Legislative Calendar
• Public Hearing Schedule
• Assembly Calendars
• Assembly Committee Agenda 

 Javascript must be enabled to properly view this page. 

 Bill No.: 

• Summary 
• Actions 
• Committee&nbspVotes 
• Floor&nbspVotes 
• Memo 
• Text 
• LFIN 
• Chamber&nbspVideo/Transcript 
A01813 Summary:

BILL NOA01813 

&nbsp

SAME ASNo Same As

&nbsp

SPONSORRosenthal

&nbsp

COSPNSR

&nbsp

MLTSPNSR

&nbsp

Add §390-f, Gen Bus L

&nbsp

Requires express and affirmative consent prior to collection, storage or transmittal of any personal information obtained from the installation or use of a smart home connected system by certain persons.

Go to top A01813 Actions:

BILL NOA01813 

&nbsp

01/14/2025referred to consumer affairs and protection

01/07/2026referred to consumer affairs and protection

Go to topA01813 Committee&nbspVotes:

Go to topA01813 Floor&nbspVotes:

There are no Assembly votes for this bill in this legislative session.

Go to topA01813 Text:

 STATE OF NEW YORK
 ________________________________________________________________________

 1813

 2025-2026 Regular Sessions

 IN ASSEMBLY

 January 14, 2025
 ___________

 Introduced by M. of A. ROSENTHAL -- read once and referred to the
 Committee on Consumer Affairs and Protection

 AN ACT to amend the general business law, in relation to collection,
 storage or transmission of personal information collected from smart
 home systems

 The People of the State of New York, represented in Senate and Assem-
 bly, do enact as follows:

 1 Section 1. The general business law is amended by adding a new section
 2 390-f to read as follows:
 3 § 390-f. Smart home systems. 1. For the purposes of this section the
 4 following terms shall have the following meanings:
 5 (a) "Smart home system" means any device, or other physical object
 6 that is capable of connecting to the internet, directly or indirectly,
 7 and that is assigned an internet protocol address or bluetooth address.
 8 (b) "End user" means a person that ultimately uses a smart home
 9 connected system regardless of whether such person installed such
 10 system.
 11 (c) "Personal information" includes, but is not limited to, the
 12 following:
 13 (i) identity information including, but not limited to, real name,
 14 alias, nickname, and user name;
 15 (ii) address information, including, but not limited to, postal
 16 address or e-mail;
 17 (iii) telephone number;
 18 (iv) account name;
 19 (v) social security number or other government-issued identification
 20 number, including, but not limited to, social security number, driver's
 21 license number, identification card number, and passport number;
 22 (vi) birthdate or age;
 23 (vii) physical characteristic information, including, but not limited
 24 to, height and weight;

 EXPLANATION--Matter in italics (underscored) is new; matter in brackets
 [ ] is old law to be omitted.
 LBD04863-01-5

 A. 1813 2

 1 (viii) sexual information, including, but not limited to, sexual
 2 orientation, sex, gender status, gender identity, and gender expression;
 3 (ix) race or ethnicity;
 4 (x) religious affiliation or activity;
 5 (xi) political affiliation or activity;
 6 (xii) professional or employment-related information;
 7 (xiii) educational information;
 8 (xiv) medical information, including, but not limited to, medical
 9 conditions or drugs, therapies, mental health, or medical products or
 10 equipment used;
 11 (xv) financial information, including, but not limited to, credit,
 12 debit, or account numbers, account balances, payment history, or infor-
 13 mation related to assets, liabilities, or general creditworthiness;
 14 (xvi) commercial information, including, but not limited to, records
 15 of property, products or services provided, obtained, or considered, or
 16 other purchasing or consumer histories or tendencies;
 17 (xvii) location information;
 18 (xviii) internet or mobile activity information, including, but not
 19 limited to, internet protocol addresses or information concerning the
 20 access or use of any internet or mobile-based site or service;
 21 (xix) content, including text, photographs, audio or video recordings,
 22 or other material generated by or provided by an end user; and
 23 (xx) any of the above categories of information as they pertain to any
 24 children of an end user.
 25 2. (a) No business which manufactures or sells a smart home connected
 26 system shall collect, store or transmit any personal information
 27 obtained from the installation or use of a smart home connected system
 28 to a third-party without the express and affirmative conse