United States of America: Introduced New York Privacy Act (SB 365) including data protection regulation

On 4 January 2023, the New York Privacy Act (SB 365) was introduced in the Senate. The Act aims to establish consumer data rights, including the right to notice, the right to opt-out, access and deletion. The Act will require companies to disclose methods of anonymisation and inform consumers of all entities with whom their information was shared. The Act would apply to companies that conduct business in New York or offer their products or services to residents of New York State that meet one or more thresholds. In particular, the entities that have annual gross revenue of at least USD 25 million, control or process the personal data of more than 100'000 consumers, control or process the personal data of 500'000 natural persons, or derive over 50% of revenue from user's personal data sale and process the personal data of 25'000 consumers.