In December 2024, New York Governor Kathy Hochul signed six new laws designed to strengthen consumer protections, focusing on data privacy, cybersecurity, and transparency. These laws reflect the state’s commitment to safeguarding personal information and holding companies accountable for their role in protecting consumers. With these legislative actions, New Yorkers can expect stronger protections across various sectors, including social media, online dating, and healthcare.
One of the key measures requires social media companies to post their terms of service for each platform they own or operate. These companies must also submit regular reports to the Attorney General, with penalties for violations potentially reaching up to $15,000 per violation per day. This law is expected to improve transparency, giving users clearer insight into the terms and conditions governing their online interactions. It will take effect in June 2024, ensuring companies comply with these new requirements.
Additionally, the definition of identity theft has been broadened to include medical and health insurance information, further protecting individuals from misuse of their sensitive data. This legislation reflects the increasing importance of safeguarding healthcare data in the face of rising cybercrime. It will be implemented in March 2024, marking a significant step in the fight against identity theft in New York.
Another significant law addresses the need for quicker notification of data breaches. Businesses must now notify residents of New York within 30 days of a breach, including reporting to the Department of Financial Services. Alongside this, businesses must also meet strict cybersecurity standards when purchasing personal computing goods and services, helping to prevent cyberattacks. These new laws not only provide immediate protections but also signal New York’s proactive stance on cybersecurity and consumer rights.
