NY A00156

Smart access systems in residential buildings must offer alternatives to web-based apps, including key fobs, key cards, digital keys, or passcodes; tenants may request non-electronic entry for religious reasons

Tenants and lawful occupants must receive keys/key cards at no cost, plus up to four additional free keys for guests and employees; replacement keys after the first are capped at $25

Data collection is strictly limited to information necessary for building access; owners cannot collect social security numbers, track departures, use location tracking, or collect images of minors

New biometric-based smart access systems are prohibited for three years after the law takes effect; existing systems must destroy biometric data within 48 hours except for reference data

Authentication data must be destroyed within 90 days of collection; access data cannot be used for eviction proceedings or shared with third parties without a court order, and violations carry civil penalties of $5,000-$10,000 per day