Dec. 25 -- Gov. Kathy Hochul has signed a legislative bill package designed to strengthen protections for the personal data of consumers.
According to a news release from Hochul's office, companies, offices and organizations statewide, experience higher levels of fraudulent activity involving consumer data and information during the holiday season. "With this series of bills newly signed by the Governor, New York continues its commitment to protecting consumer data and safety both online and offline from dangerous activity," the release stated.
"New Yorkers should never have to worry about their personal information being misused or falling into the wrong hands," Hochul said. "With this legislative package, we are taking bold action to hold companies accountable, strengthen protections, and give consumers the transparency and security they need and deserve. My administration will continue to lead the fight to protect privacy, combat fraud, and ensure every New Yorker can live and work with confidence in an increasingly digital world."
One piece of legislation requires social media companies to post terms of service for each social media platform owned or operated by the company "in a manner reasonably designed to inform all users of the social media platform of the existence and contents of the terms of service"; and also requires social media companies to submit to the attorney general certain terms of service reports; and provides remedies for violations, according to the release.
State Sen. Brad Hoylman-Sigal said, "With white supremacy, antisemitism, islamophobia, anti-LGBTQ hatred and anti-AAPI violence all on the rise, social media companies must ensure that their platforms don't advance disinformation and hate-fueled violence. The current social media landscape makes it too easy for bad actors to promote false claims, hate and dangerous conspiracies, too often leading to violence like January 6 and the rise in antisemitism and islamophobia we have seen in the aftermath of the October 7th terrorist attacks in Israel."
Another piece of legislation strengthens protections of medical and insurance information from identity theft.
State Sen. Roxanne J. Persaud said, "By expanding the definition of identity theft to include medical and health insurance details, we are taking a crucial step forward in safeguarding New Yorkers' personal and medical information. This legislation will help ensure that the privacy and security of every New Yorker's sensitive health data is better protected, giving people peace of mind knowing that their medical information is just as safe as their financial records."
Another bill requires better security features in devices procured by the government by directing state agencies to require procurement of personal computing goods, services and solutions meet the National Institute of Standards and Technology Cybersecurity Framework.
State Sen. Kevin Thomas said, "Cyber security attacks cost business and government billions each year, we need to take all available measures to combat this growing problem. Utilizing best practices that have been adopted by the U.S. Government is an important step in protecting the data of our residents."
Another piece of legislation requires that a business provide notification of a data breach within 30 days of such breach; and includes the Department of Financial Services to the list of entities that must be notified of a data breach that affects any New York resident.
State Sen. Leroy Comrie said, "This bill marks a significant step forward in protecting New Yorkers' personal data and ensuring transparency from businesses in the event of a data breach. By requiring notification within 30 days and including the Department of Financial Services as a key entity to be informed, this law strengthens consumer protections and enhances accountability."
Yet another bill prohibits the use of social media websites for debt collection.
State Sen. Kevin Parker said, "Debt collectors should not have the ability to invade the personal privacy of New Yorkers through online platforms or social media. With this law, we are protecting New Yorkers from these intrusive and inappropriate tactics, reaffirming our commitment to safeguarding their privacy in the digital age."
Assemblymember Bichotte Hermelyn said, "Social media has become the Wild West of the internet for fraudsters and bad actors to steal our money; threatening our safety and causing irreparable damage, but New York is leading the nation in fighting back by enacting sweeping online safety legislation."
Online dating services are the target of another bill, which relates to how such services handle fraudulent members; and requires certain disclosures and regulations.
State Sen. James Skoufis said, "Americans lose billions each year to scams, and dating sites are often used to target those looking to connect. This new law permits online dating platforms to disclose to its users when someone they've been in contact with has been previously banned or when someone they've previously been in contact with has since been banned. Having this fuller picture can help New Yorkers make informed decisions about with whom they want to invest their time."
Assemblymember Clyde Vanel said, "The romance scam industry is a multi-billion dollar enterprise that preys on vulnerable groups, including the elderly. This legislation is an important step forward in protecting New Yorkers from these heartless schemes by ensuring that online dating services inform New York members when they have interacted with fraudulent accounts."