Provides for the protection of health information; establishes requirements for communications to individuals about their health information; requires either written consent or a designated necessary purpose for the processing of an individual's health information.
Requires certain disclosures by a developer of virtual tokens in advertisements involving such virtual tokens; provides restrictions concerning advertising.
Provides that a business must provide notification of a data breach within 30 days of such breach; includes the department of financial services to the list of entities that must be notified of a data breach that affects any New York resident.
Creates the mobile high-technology training facilities program to award one to one matching grants on a competitive basis to qualified applicants for the design, development and/or outfit of mobile high-technology training facilities that complement certificate, degree or other recognized credentialing programs.
Creates a temporary state commission to study and investigate how to regulate artificial intelligence, robotics and automation; repeals such commission.
Enacts the New York child data privacy protection act to prevent the exploitation of children's data; requires data controllers to assess the impact of its products on children for review by the bureau of internet and technology; bans certain data collection and targeted advertising.
Provides for the protection of health information; establishes requirements for communications to individuals about their health information; requires either written consent or a designated necessary purpose for the processing of an individual's health information.
Relates to the security and cyber security of certain critical infrastructure, including energy generating and transmission facilities, storage facilities for hazardous substances, and commercial aviation, petroleum and natural gas fuel transmission facilities and pipelines.
Requires governmental entities to, whenever possible and feasible, consider implementing multifactor authentication for local and remote network access; requires public websites to encrypt all exchanges and to comply with privacy standards.
Creates a temporary state commission to study and investigate how to regulate artificial intelligence, robotics and automation; repeals such commission.
Enacts the "advanced artificial intelligence licensing act"; providing for regulation of advanced artificial intelligence systems (Part A); requiring registration and licensing of high-risk advanced artificial intelligence systems and related provisions regarding the operation of such systems (Part B); establishing the advanced artificial intelligence ethical code of conduct (Part C); and prohibiting the development and operation of certain artificial intelligence systems (Part D).