S T A T E O F N E W Y O R K
________________________________________________________________________
6848
2019-2020 Regular Sessions
I N S E N A T E
November 13, 2019
___________
Introduced by Sen. THOMAS -- read twice and ordered printed, and when
printed to be committed to the Committee on Rules
AN ACT to amend the general business law, in relation to requiring
registration of data brokers and directing the attorney general to
maintain a website of such registrations
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. The general business law is amended by adding a new article
44 to read as follows:
ARTICLE 44
DATA BROKER REGISTRY
SECTION 1400. DEFINITIONS.
1401. ANNUAL REGISTRATION.
1402. WEBSITE.
1403. PENALTIES.
§ 1400. DEFINITIONS. FOR THE PURPOSES OF THIS ARTICLE, THE FOLLOWING
TERMS SHALL HAVE THE FOLLOWING MEANINGS:
1. "CONSUMER" SHALL MEAN A NATURAL PERSON WHO IS A NEW YORK RESIDENT.
"CONSUMER" SHALL NOT INCLUDE AN EMPLOYEE OR CONTRACTOR OF A BUSINESS
ACTING IN THEIR ROLE AS AN EMPLOYEE OR CONTRACTOR.
2. "DATA BROKER" SHALL MEAN A BUSINESS THAT KNOWINGLY COLLECTS AND
SELLS TO THIRD PARTIES THE PERSONAL INFORMATION OF A CONSUMER WITH WHOM
THE BUSINESS DOES NOT HAVE A DIRECT RELATIONSHIP. "DATA BROKER" SHALL
NOT INCLUDE A CONSUMER REPORTING AGENCY COVERED BY THE FEDERAL FAIR
CREDIT REPORTING ACT OR A FINANCIAL INSTITUTION COVERED BY THE GRAMM-
LEACH-BLILEY ACT OR AN ENTITY COVERED BY THE INSURANCE INFORMATION AND
PRIVACY PROTECTION ACT.
3. "DIRECT RELATIONSHIP" SHALL MEAN THAT THE CONSUMER IS A PAST OR
PRESENT: (A) CUSTOMER, CLIENT, SUBSCRIBER OR USER OF THE BUSINESS'S
GOODS OR SERVICES; (B) EMPLOYEE, CONTRACTOR OR AGENT OF THE BUSINESS;
(C) INVESTOR IN THE BUSINESS; OR (D) DONOR TO THE BUSINESS.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD14182-01-9
S. 6848 2
4. "PERSONAL INFORMATION" SHALL MEAN ANY INFORMATION CONCERNING A
NATURAL PERSON WHICH, BECAUSE OF NAME, NUMBER, PERSONAL MARK, OR OTHER
IDENTIFIER, CAN BE USED TO IDENTIFY SUCH NATURAL PERSON.
§ 1401. ANNUAL REGISTRATION. ANNUALLY, ON OR BEFORE JANUARY THIRTY-
FIRST, A DATA BROKER, AS DEFINED UNDER THIS ARTICLE, SHALL:
1. REGISTER WITH THE ATTORNEY GENERAL IN A MANNER PROVIDED FOR BY THE
ATTORNEY GENERAL;
2. PAY A REGISTRATION FEE IN AN AMOUNT DETERMINED BY THE ATTORNEY
GENERAL NOT TO EXCEED THE REASONABLE COST OF ESTABLISHING AND MAINTAIN-
ING THE INFORMATIONAL WEBSITE DESCRIBED IN SECTION FOURTEEN HUNDRED
THREE OF THIS ARTICLE; AND
3. PROVIDE THE FOLLOWING INFORMATION:
(A) THE NAME OF THE DATA BROKER AND ITS PRIMARY PHYSICAL, EMAIL AND
INTERNET WEBSITE ADDRESS;
(B) WHETHER THE DATA BROKER PERMITS A CONSUMER TO: OPT OUT OF THE DATA
BROKER'S COLLECTION OF BROKERED PERSONAL INFORMATION; OPT OUT OF ITS
DATABASES; OR OPT OUT OF CERTAIN SALES OF DATA;
(C) THE METHOD FOR REQUESTING AN OPT-OUT UNDER PARAGRAPH (B) OF THIS
SUBDIVISION;
(D) A STATEMENT SPECIFYING THE DATA COLLECTION, DATABASES, OR SALES
ACTIVITIES FROM WHICH A CONSUMER MAY NOT OPT OUT; AND
(E) ANY ADDITIONAL INFORMATION OR EXPLANATION THE DATA BROKER CHOOSES
TO PROVIDE CONCERNING ITS DATA COLLECTION PRACTICES.
§ 1402. WEBSITE. THE ATTORNEY GENERAL SHALL ESTABLISH, MANAGE AND
MAINTAIN A STATEWIDE REGISTRY ON ITS INTERNET WEBSITE, WHICH SHALL LIST
ALL REGISTERED DATA BROKERS DOING BUSINESS IN THE STATE AND MAKE ACCES-
SIBLE TO THE PUBLIC ALL THE INFORMATION PROVIDED BY DATA BROKERS PURSU-
ANT TO THIS ARTICLE. PRINTED HARD COPIES OF SUCH REGISTRY SHALL BE MADE
AVAILABLE UPON REQUEST AND PAYMENT OF A FEE TO BE DETERMINED BY THE
ATTORNEY GENERAL.
§ 1403. PENALTIES. A DATA BROKER THAT FAILS TO REGISTER IS SUBJECT TO
INJUNCTION AND IS LIABLE FOR CIVIL PENALTIES OF ONE HUNDRED DOLLARS FOR
EACH DAY THAT SUCH DATA BROKER FAILS TO REGISTER, AN AMOUNT EQUAL TO THE
FEES DUE UNDER THIS SECTION DURING THE PERIOD SUCH DATA BROKER FAILED TO
REGISTER AND EXPENSES INCURRED BY THE ATTORNEY GENERAL IN THE INVESTI-
GATION AND PROSECUTION OF THE ACTION.
§ 2. This act shall take effect on the first of January next succeed-
ing the date on which it shall have become a law.