United States of America: Passed New York Privacy Act (SB 365) including data protection regulation

On 3 June 2024, the New York Privacy Act (SB 365) passed in the Senate. The Act aims to establish consumer data rights. It requires companies to disclose methods of anonymisation and inform consumers of all entities with whom their information was shared. The Act would apply to companies that conduct business in New York or offer their products or services to residents of New York State that meet one or more thresholds. In particular, the entities that have annual gross revenue of at least USD 25 million control or process the personal data of more than 50'000 consumers or derive over 50% of revenue from user's personal data sales.