New York A 4947: Extends provisions of law relating to catastrophic or reinsurance coverage issued to certain small groups

Bill Text

Bill Search and Legislative Information | New York State Assembly 

• 

• 

• 

• 

• 

• 

• 

• 

 Skip to main content 

 New York State Assembly

 Speaker Carl E. Heastie

 --> 
 --> 

 --> 

• 
 Assembly Members 

• 
 Legislative Info 

• 
 Public Hearings 

• 
 Speaker's Press 

• 
 Assembly Reports 

• 
 Committees & More 

• Bill Search Home
• Laws
• Legislative Calendar
• Public Hearing Schedule
• Assembly Calendars
• Assembly Committee Agenda 

 Javascript must be enabled to properly view this page. 

 Bill No.: 

• Summary 
• Actions 
• Committee&nbspVotes 
• Floor&nbspVotes 
• Memo 
• Text 
• LFIN 
• Chamber&nbspVideo/Transcript 
A04947 Summary:

BILL NOA04947 

&nbsp

SAME ASNo Same As

&nbsp

SPONSORRosenthal

&nbsp

COSPNSRWeprin, Simon, Dinowitz, Paulin

&nbsp

MLTSPNSR

&nbsp

Add Art 42-A §§1200 - 1207, Gen Bus L

&nbsp

Enacts the NY privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.

Go to top A04947 Actions:

BILL NOA04947 

&nbsp

02/10/2025referred to consumer affairs and protection

01/07/2026referred to consumer affairs and protection

Go to topA04947 Committee&nbspVotes:

Go to topA04947 Floor&nbspVotes:

There are no Assembly votes for this bill in this legislative session.

Go to topA04947 Text:

 STATE OF NEW YORK
 ________________________________________________________________________

 4947

 2025-2026 Regular Sessions

 IN ASSEMBLY

 February 10, 2025
 ___________

 Introduced by M. of A. ROSENTHAL, WEPRIN, SIMON, DINOWITZ, PAULIN --
 read once and referred to the Committee on Consumer Affairs and
 Protection

 AN ACT to amend the general business law, in relation to the management
 and oversight of personal data

 The People of the State of New York, represented in Senate and Assem-
 bly, do enact as follows:

 1 Section 1. Short title. This act shall be known and may be cited as
 2 the "New York privacy act".
 3 § 2. Legislative intent. 1. Privacy is a fundamental right and an
 4 essential element of freedom. Advances in technology have produced ramp-
 5 ant growth in the amount and categories of personal data being gener-
 6 ated, collected, stored, analyzed, and potentially shared, which
 7 presents both promise and peril. Companies collect, use and share our
 8 personal data in ways that can be difficult for ordinary consumers to
 9 understand. Opaque data processing policies make it impossible to evalu-
 10 ate risks and compare privacy-related protections across services,
 11 stifling competition. Algorithms quietly make decisions with critical
 12 consequences for New York consumers, often with no human accountability.
 13 Behavioral advertising generates profits by turning people into products
 14 and their activity into assets. New York consumers deserve more notice
 15 and more control over their data and their digital privacy.
 16 2. This act seeks to help New York consumers regain their privacy. It
 17 gives New York consumers the ability to exercise more control over their
 18 personal data and requires businesses to be responsible, thoughtful, and
 19 accountable managers of that information. To achieve this, this act
 20 provides New York consumers a number of new rights, including clear
 21 notice of how their data is being used, processed and shared; the abili-
 22 ty to access and obtain a copy of their data in a commonly used elec-
 23 tronic format, with the ability to transfer it between services; the
 24 ability to correct inaccurate data and to delete their data; and the

 EXPLANATION--Matter in italics (underscored) is new; matter in brackets
 [ ] is old law to be omitted.
 LBD04423-01-5

 A. 4947 2

 1 ability to challenge certain automated decisions. This act also imposes
 2 obligations upon businesses to maintain reasonable data security for
 3 personal data, to notify New York consumers of foreseeable harms arising
 4 from use of their data and to obtain specific consent for that use, and
 5 to conduct regular assessments to ensure that data is not being used for
 6 unacceptable purposes. These data assessments can be obtained and evalu-
 7 ated by the New York State Attorney General, who is empowered to obtain
 8 penalties for violations of this act and prevent future violations. This
 9 act also grants New York consumers who have been injured as the result
 10 of a violation a private right of action, which includes reasonable
 11 attorneys' fees to a prevailing plaintiff.
 12 § 3. The general business law is amended by adding a new article 42-A
 13 to read as follows:
 14 ARTICLE 42-A
 15 NEW YORK PRIVACY ACT
 16 Section 1200. Definitions.
 17 1201. Jurisdictional scope.
 18 1202. Consumer rights.
 19 1203. Controller, processor, and third party responsibilities.
 20 1204. Data brokers.
 21 1205. Limitations.
 22 1206. Enforcement and private