NY A08101

Grants New York residents the right to request disclosure of personal information collected by state government entities and their contractors, including categories of data, sources, purposes for collection, and third parties with whom information is shared

Establishes a right to request deletion of personal information, with exceptions for completing the original collection purpose, complying with legal obligations, or other lawful internal uses

Prohibits government entities and contractors from sharing personal information unless it is crucial to contracted services or essential to another entity's duties, and bans the sale of shared personal information

Requires government entities to provide at least two methods for submitting information requests (including a toll-free phone number and website address), respond within 45 days (extendable by 45 days), and limits required responses to two requests per individual per year

Protects individuals from discrimination for exercising their data rights and authorizes the Attorney General to take action against entities that fail to implement reasonable security procedures, though no private right of action is created