Add Art 45 Title I §§1500 & 1501, Title II §§1510 - 1513, Title III §§1520 - 1529, Title IV §§1540 - 1544,
Title V §§1550 - 1554, Gen Bus L; add §85, St Fin L
Establishes consumers' foundational data privacy rights; creates oversight mechanisms; establishes enforcement mechanisms; establishes the privacy and security victims relief fund.
NEW YORK STATE ASSEMBLY MEMORANDUM IN SUPPORT OF LEGISLATION submitted in accordance with Assembly Rule III, Sec 1(f)
BILL NUMBER: A6319
SPONSOR: Solages TITLE OF BILL:
An act to amend the general business law, in relation to establishing
consumers' foundational data privacy rights, creating oversight mech-
anisms, and establishing enforcement mechanisms; and to amend the state
finance law, in relation to establishing the privacy and security
victims relief fund
PURPOSE:
To establish requirements for how companies and covered entities handle
personal data in an effort to expand consumer data protection.
SUMMARY:
Section 1. Amends the general business law by adding a new article 45.
Section 2. Amends state finance law by adding a new section 85.
Section 3. Sets the effective date.
JUSTIFICATION:
As technology continues to advance, the public has become increasingly
concerned with data privacy, especially regarding how big tech companies
collect, share, and use personal data. 79% of Americans report being
concerned with the way their data is being used by companies
1. 8 in
10 Americans feel they have little to no control over the data stored
about them
2. Implementing data privacy requirements enhances trans-
parency, allowing consumers to have a better understanding of what
personal data is being collected and used. 63% of Americans say they
understand very little or nothing at all about the laws and regulations
that are currently in place to protect their data
3.
This legislation requires entities to have a user-friendly privacy poli-
cy, enabling users to protect themselves and their identity. Expanding
data privacy laws protects consumers from having their personal data
exploited, whether it be through targeted advertisements or by identity
theft.
This legislation prevents covered entities from abusing their ability to
collect data by establishing requirements that limit what information
can be collected, stored, and shared. It also expands the rights of
consumers through the implementation of an opt-out system in which users
can choose not to have their personal information stored and/or shared.
Holding companies accountable enables users to be safer online and feel
more confident when sharing data online.
RACIAL JUSTICE IMPACT:
TBD.
GENDER JUSTICE IMPACT:
TBD.
LEGISLATIVE HISTORY:
New bill.
FISCAL IMPLICATIONS:
TBD.
EFFECTIVE DATE:
This act shall take effect on the one hundred eightieth day after it
shall have become a law.
1
https: Avvv-wewresearch.oralinternet/2019/11/15/americans-and- privacy-
concern ed-confused-an d-feelina-lack-of-control- over-their-personal-
information/.
2
https://www.pewresearch.or'iiiternet/2O19/11
/15/americans-and-privacy-concerned-confused-an d-feelina- lack-of-con-
trol-over-their-personal-informationl.
3
httus://www.pewresearch.org/intemet/2019/11 /15/americans- and-privacy-
concerned-confused-an d-feelina-lack-of-control- over-their-personal-in-
formation/.
