Description

Rejection of New York Privacy Act enhancing consumer data protection

On 10 June 2021, the New York Privacy Act ist rejected after failing to pass before the New York legislature adjourned. The Act would have given consumers more control over their personal data, giving them the right to know how data is used, obtain a copy of collected data, correct and delete data. Moreover, the Act required data brokers to register and pay an annual fee to the Attorney General. In addition to the Attorney General's action, consumers would be able to use a private right of action.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-05-12
under deliberation

The New York Privacy Act is reintroduced to the New York Senate. It would give consumers more contr…

2021-06-10
rejected

On 10 June 2021, the New York Privacy Act ist rejected after failing to pass before the New York le…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All
2
Type Private organisation
Economic activity other service provider
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): storage (any form)
Regulatory tool
Risk or other impact assessment requirement
Sanctions
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
Registration requirement
Sanctions
Regulated subjects
2
Regulatory tool
Purpose/processing limitation
User notification requirement
User consent: Opt-in requirement
Sanctions
Regulated subjects
1
personal data (all forms): sale
Regulatory tool
User notification requirement
User consent: Opt-in requirement
Sanctions
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): storage (any form)

personal data (all forms): data processing

personal data (all forms): sale