A 4947

As introduced: - Enacts the New York Privacy Act, which gives consumers rights over the data collected from them including a right to notice, a right to consent before the processing of personal data unless for certain purposes, a right to access, a right to portable data, a right to correct, and a right to delete. - Requires a controller making an automated decision materially contributing to the denial of certain services, to provide notice and allow for an appeal with human review. Requires an impact assessment. - Requires controllers to conduct a data protection assessment. Prohibits discriminating against consumers for exercising rights. - Requires data brokers to register with the attorney general. - Creates a private right of action for certain violations.