Assembly Bill ('AB') 2587 for An Act to amend the executive law, in relation to enacting the New York data protection act was introduced, on 26 January 2023, to the New York State Assembly, and thereafter referred, on the same date, to the New York State Assembly Committee on Governmental Operations. In particular, AB 2587 highlights its application to government entities and contractors, that contract personal information on behalf of government entities.

Further, AB 2587 provides that individuals shall have the right to be informed, delete, not be discriminated against, access, and relief. More specifically, AB 2587 details that to comply with the right to accessibility, government entities and contractors must make available a designated method for submitting verifiable information requests, including a toll-free telephone number and a website address, and if government entities do maintain a website, provide instructions on how to request disclosure and delete personal information.

Notably, AB 2587 outlines that no government entity or contractor shall share any individual's personal information with a contractor or subcontractor unless such information is crucial to the purpose for which such government entity or contractor has contracted their services. In addition, AB 2587 notes that government entities and contractors must not sell personal information about individuals that has been shared with government entities.

You can read AB 2587 and track its progress here.

UPDATE (25 January 2024)

AB 2587 reintroduced to Senate

On 3 January 2024, AB 2587 was reintroduced to the State Assembly and referred to the Governmental Operations Committee.

You can read the bill and track its progress here.