What does New York require right now?

Requires businesses using algorithmic pricing systems to clearly disclose to consumers at the point of purchase when prices are being set algorithmically rather than through direct human decisions. Disclosure must be clear and conspicuous. Effective November 10, 2025.

Requires employers using automated employment decision tools in NYC hiring or promotion to conduct independent third-party bias audits annually and publish summary results publicly. Candidates must be notified at least 10 business days before assessment. Enforced by NYC Department of Consumer and Worker Protection.

Would regulate automated decision-making by state agencies including public higher education institutions, requiring impact assessments and human oversight. Public college admissions and discipline systems using AI would fall under this requirement. Signed into law Dec 21, 2024 (Ch. 674).

Responsible AI Safety and Education Act. Signed Dec 19, 2025; amended Mar 27, 2026. Eff. Jan 1, 2027. Targets frontier AI developers — requires published safety protocols, risk assessments, third-party audits.

Per-violation penalties capped per GBL §899-aa (breach: greater of $5,000 or up to $10 per affected student/teacher/principal record; general violations up to $1,000/$5,000/$10,000 tiers) — no per-day amount. §2-d places the Chief Privacy Officer at NYSED; educational-agency DPO designation comes from Part 121 regulations. Requires published parents bill of rights and statutory vendor-contract language.

Nation's first statewide moratorium on biometric surveillance tools in K-12 schools, enacted 2020. After NYSED study, Commissioner issued 2023 determination continuing a statewide prohibition on purchasing or using facial recognition technology in K-12 schools (ban remains in force). Other biometrics (fingerprints, iris scans) now allowed at local discretion if districts evaluate privacy, civil rights, effectiveness, and seek parental input. NYSED concluded facial recognition risks and inequities outweigh potential benefits.

Restricts how social media, gaming, and messaging platforms can interact with users under 18: default privacy settings for minors, AI companion features disabled by default for minors, and AG age-assurance rulemaking authority. Signed by Gov. Hochul May 26, 2026 as part of the FY2026-27 budget (A10008, Part Y).