S 4276

As introduced: - Requires any entity that conducts business in New York and maintains the personal information of 500 or more individuals to provide meaningful notice about their use of personal information. - Requires opt-in consent to process an individual's personal information. Prohibits discriminating against individuals for opting out. - Requires a reasonable standard of care to protect personal information. Limits processing to what is necessary. - Requires giving an individual access to the information in a usable format with a right to delete. Requires opt-in consent to share an individual's device identifier with a third party. - Requires informed consent to collect or obtain biometric information. Prohibits selling biometric information. - Prohibits surreptitious surveillance with a microphone or camera in a device. - Prohibits processing information for advertising in a manner that discriminates. - Requires state agencies to conduct an impact assessment before using an automated decision system. Requires notice to individuals for the processing of personal information for a system. - Requires an automated decision system that determines rights, benefits, opportunities, or services to use open-source software and be approved by a governing body. Prohibits discrimination with such a system. - Prohibits using a system to make final decisions without human intervention to impact legal rights, or for use with a weapon. - Requires schools to incorporate digital literacy, digital privacy, and safe use of the internet in the curriculum.