New York. Children's privacy. Act
NY CDPANew York Child Data Protection Act (N.Y. Gen. Bus. Law § 899-ee et seq.)
In force
Partly verified
Low confidence.Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.
§1Summary
- Synopsis
Bars operators from processing personal data of users known to be under 18 (or on services primarily directed to minors) unless strictly necessary for the service or with informed consent, and bars selling minors' data.
- Key themes
- Unique features
Extends COPPA-style protection to all under-18s; recognises device age signals; third-party operators must also comply.
- SaaS relevance
Consumer SaaS with New York minor users, and vendors processing such data for them, must check necessity or obtain consent.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Up to $5,000 per violation
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text nysenate.gov
- Authority
- New York Attorney General
§5Where it applies
- Domestic law of
- New York
§6Sources and verification
- Sources consulted
- Verification
Low confidence.
Partly verified
Low confidence.Not re-verified against a primary source in this session (search budget exhausted); details from established knowledge.