STATE OF NEW YORK ________________________________________________________________________ 6130 2025-2026 Regular Sessions IN SENATE March 5, 2025 ___________ Introduced by Sen. COONEY -- read twice and ordered printed, and when printed to be committed to the Committee on Internet and Technology AN ACT to amend the executive law, in relation to certain interagency agreements with the consumer protection division The People of the State of New York, represented in Senate and Assem- bly, do enact as follows: 1 Section 1. Subparagraphs 15 and 16 of paragraph (a) of subdivision 3 2 of section 94-a of the executive law, subparagraph 15 as amended and 3 subparagraph 16 as added by chapter 374 of the laws of 2022, are amended 4 and a new subparagraph 17 is added to read as follows: 5 (15) create an internet website or webpage pursuant to section three 6 hundred ninety-c of the general business law, as added by chapter five 7 hundred nine of the laws of two thousand seven; [and] 8 (16) exercise such powers and duties granted to the secretary by arti- 9 cle sixteen of the energy law as the secretary may direct, including, 10 but not limited to: consult with such president of the New York state 11 energy research and development authority in connection with investi- 12 gations conducted by such president pursuant to article sixteen of the 13 energy law; make determinations relating to compliance by products with 14 the standards adopted pursuant to article sixteen of the energy law; 15 order the immediate cessation of any distribution, sale or offer for 16 sale, import, or installation of any product that does not meet such 17 standards; and impose civil penalties as contemplated by article sixteen 18 of the energy law[.]; and 19 (17) establish a process by which any state agency or third party, 20 pursuant to an interagency agreement with the division for the purposes 21 of fraud prevention, identity verification, and ensuring the integrity 22 or security of individual identities, to grant access to verify New York 23 resident identities via a secure comparison process against state 24 systems. Such process shall require, at a minimum, auditable user 25 consent, no data or images leave state systems, facial images are EXPLANATION--Matter in italics (underscored) is new; matter in brackets [ ] is old law to be omitted. LBD10607-02-5
S. 6130 2 1 converted into a mathematical representation and adequately protected to 2 facilitate a secure comparison, and any vendor selected shall be 3 required to annually submit their solution for National Institute of 4 Standards and Technology (NIST) testing and publication and such vendor 5 shall have ISO 30101 Level 2 Conformant Liveness (PAD Level 2) compli- 6 ance verified by a NIST approved third party. 7 § 2. This act shall take effect immediately.