New York: Bill on New York Data Protection Act introduced to State Assembly
Assembly Bill ('AB') 2587 for An Act to amend the executive law, in relation to enacting the New York data protection act was introduced, on 26 January 2023, to the New York State Assembly, and thereafter referred, on the same date, to the New York State Assembly Committee on Governmental Operations. In particular, AB 2587 highlights its application to government entities and contractors, that contract personal information on behalf of government entities.
Further, AB 2587 provides that individuals shall have the right to be informed, delete, not be discriminated against, access, and relief. More specifically, AB 2587 details that to comply with the right to accessibility, government entities and contractors must make available a designated method for submitting verifiable information requests, including a toll-free telephone number and a website address, and if government entities do maintain a website, provide instructions on how to request disclosure and delete personal information.
Notably, AB 2587 outlines that no government entity or contractor shall share any individual's personal information with a contractor or subcontractor unless such information is crucial to the purpose for which such government entity or contractor has contracted their services. In addition, AB 2587 notes that government entities and contractors must not sell personal information about individuals that has been shared with government entities.
You can read AB 2587 and track its progress here.