New York data privacy rights and data broker removal (2026)
| Comprehensive privacy law? | No comprehensive law |
|---|---|
| In effect since | SHIELD Act security requirements effective March 21, 2020; NY Child Data Protection Act effective June 20, 2025. |
| Your core rights | (no general comprehensive consumer rights) Child Data Protection Act restricts processing of minors' data; SHIELD Act mandates reasonable data security |
| Honors Global Privacy Control? | Not required |
| Data-broker registry? | No |
| Enforced by | New York Attorney General (exclusive for SHIELD Act and Child Data Protection Act) |
Your privacy rights in New York
- (no general comprehensive consumer rights) Child Data Protection Act restricts processing of minors' data; SHIELD Act mandates reasonable data security
How to exercise your rights
New York has NO comprehensive access/delete/opt-out rights for adults. Residents benefit from the SHIELD Act's data-security mandate and breach notification, the Child Data Protection Act for minors, and can submit opt-out/deletion requests to CCPA-covered data brokers and use the Global Privacy Control. Covered officials can use the NY address-protection statute.
Ready to see who's selling your information? Browse our data broker removal guides for step-by-step opt-out instructions.
California DROP
None for general consumers. New York's address-protection statute (Judiciary Law § 859 / 'Daniel's Law'-style) provides a targeted takedown for covered officials.
Sensitive information
NY Child Data Protection Act requires consent (or restricts processing to what is strictly necessary) for the personal data of minors under 18. No general adult sensitive-data regime.
Special protections
New York enacted address-protection provisions for judges and certain public officials (N.Y. Judiciary Law § 859 and related provisions) allowing requests to remove personal information from the internet/government sites. NY Child Data Protection Act (effective June 20, 2025). Address Confidentiality Program administered by the NY Department of State for DV/stalking survivors. The proposed NY Health Information Privacy Act (passed legislature 2025; awaiting/under amendment) would regulate consumer health data.
Biometric privacy
No statewide biometric statute with a private right of action (NYC has a biometric ordinance, NYC Admin. Code § 22-1201 et seq., with a limited private right of action for the city). New York's SHIELD Act treats biometric data as 'private information' for security/breach purposes.
How to file a complaint
New York Attorney General, Bureau of Consumer Frauds & Protection — https://ag.ny.gov/consumer-frauds
Recent updates (2025–2026)
NY Child Data Protection Act effective June 20, 2025. The comprehensive NY Privacy Act remains pending (not enacted) as of 2026. The NY Health Information Privacy Act advanced in 2025 but is not yet operative — verify current status.
Frequently asked questions
Does New York have a data privacy law?
New York has no comprehensive consumer privacy law, but federal rules and data-broker opt-out paths still apply.
How do I remove my information from data brokers in New York?
New York has NO comprehensive access/delete/opt-out rights for adults. Residents benefit from the SHIELD Act's data-security mandate and breach notification, the Child Data Protection Act for minors, and can submit opt-out/deletion requests to CCPA-covered data brokers and use the Global Privacy Control. Covered officials can use the NY address-protection statute.
Can I sue for privacy violations in New York?
New York Attorney General (exclusive for SHIELD Act and Child Data Protection Act); no private right of action under those statutes.
Does New York have a data broker registry?
No. New York does not have a dedicated data-broker registry, but you can still opt out of brokers directly.
Sources
- https://ag.ny.gov/consumer-frauds
- https://www.nysenate.gov/legislation/laws/GBS/899-BB
- https://iapp.org/resources/article/us-state-privacy-legislation-tracker
Find out what data brokers know about you
Run a free scan to see which sites are exposing your personal information — name, phone, address, email, and more.
Start your free scan →