New York data privacy rights and data broker removal (2026)
How to exercise your data privacy rights in New York, opt out of data brokers, and file a complaint — updated for 2026.
At a glance
- Comprehensive privacy law? No. Your rights come from the statutes below.
- In effect since SHIELD Act security requirements effective March 21, 2020; NY Child Data Protection Act effective June 20, 2025.
- Your core rights (no general comprehensive consumer rights) Child Data Protection Act restricts processing of minors' data; SHIELD Act mandates reasonable data security
- Honors Global Privacy Control? Not required
- Data-broker registry? No
- Enforced by New York Attorney General (exclusive for SHIELD Act and Child Data Protection Act)
What Delist can do for you in New York
New York has no comprehensive privacy law in effect. We submit your requests through each broker's own opt-out channel, on your behalf. Many national brokers honor these requests wherever you live, but none is required to by New York law, so we follow up and re-file rather than assume.
How the three groups work: our authorized-agent framework.
What still protects you
New York has no comprehensive consumer privacy law for adults. Residents have: the SHIELD Act (reasonable-security mandate + breach notification, § 899-aa/§ 899-bb); the Child Data Protection Act for minors; targeted address-protection for covered officials; and the practical ability to opt out of/request deletion from CCPA-covered data brokers and to use GPC. They cannot compel ordinary businesses to provide access, correction, deletion, or opt-out of sale/targeted advertising under state law.
Your privacy rights in New York
- (no general comprehensive consumer rights) Child Data Protection Act restricts processing of minors' data; SHIELD Act mandates reasonable data security
How to exercise your rights
New York has NO comprehensive access/delete/opt-out rights for adults. Residents benefit from the SHIELD Act's data-security mandate and breach notification, the Child Data Protection Act for minors, and can submit opt-out/deletion requests to CCPA-covered data brokers and use the Global Privacy Control. Covered officials can use the NY address-protection statute.
Ready to see who's selling your information? Browse our data broker removal guides for step-by-step opt-out instructions.
California DROP
None for general consumers. New York's address-protection statute (Judiciary Law § 859 / 'Daniel's Law'-style) provides a targeted takedown for covered officials.
Sensitive information
NY Child Data Protection Act requires consent (or restricts processing to what is strictly necessary) for the personal data of minors under 18. No general adult sensitive-data regime.
Special protections
New York enacted address-protection provisions for judges and certain public officials (N.Y. Judiciary Law § 859 and related provisions) allowing requests to remove personal information from the internet/government sites. NY Child Data Protection Act (effective June 20, 2025). Address Confidentiality Program administered by the NY Department of State for DV/stalking survivors. The proposed NY Health Information Privacy Act (passed legislature 2025; awaiting/under amendment) would regulate consumer health data.
Biometric privacy
No statewide biometric statute with a private right of action (NYC has a biometric ordinance, NYC Admin. Code § 22-1201 et seq., with a limited private right of action for the city). New York's SHIELD Act treats biometric data as 'private information' for security/breach purposes.
How to file a complaint
New York Attorney General, Bureau of Consumer Frauds & Protection — https://ag.ny.gov/consumer-frauds
Recent updates (2025–2026)
NY Child Data Protection Act effective June 20, 2025. The comprehensive NY Privacy Act remains pending (not enacted) as of 2026. The NY Health Information Privacy Act advanced in 2025 but is not yet operative — verify current status.
Frequently asked questions
Does New York have a data privacy law?
New York has no comprehensive consumer privacy law, but federal rules and data-broker opt-out paths still apply.
How do I remove my information from data brokers in New York?
New York has NO comprehensive access/delete/opt-out rights for adults. Residents benefit from the SHIELD Act's data-security mandate and breach notification, the Child Data Protection Act for minors, and can submit opt-out/deletion requests to CCPA-covered data brokers and use the Global Privacy Control. Covered officials can use the NY address-protection statute.
Who enforces privacy law in New York?
New York Attorney General (exclusive for SHIELD Act and Child Data Protection Act); no private right of action under those statutes.
Does New York have a data broker registry?
No. New York does not have a dedicated data-broker registry, but you can still opt out of brokers directly.
Sources
Also in this state
Find out what data brokers know about you
A free scan shows which sites are exposing your name, phone, address and email, and Delist files the removals for you.