Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

NY Algorithmic Pricing Disclosure Act

In force New York · In force Nov 10, 2025 · no upcoming deadlines

Official text
Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

Deadlines

Takes effectNov 10, 2025 · 12 months ago · Source
Disclosure duty takes effectAlgorithmic pricing disclosures required.
MilestoneMay 9, 2025 · 18 months ago · Source
Signed as part of FY2026 budgetS3008C Part X signed as Chapter 58 of 2025.

Summaries for reference, not legal advice. Check the official text.

What it does

Any business that sets a price using personalized algorithmic pricing must show the disclosure 'THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA' next to the price. Insurers, GLBA financial institutions and certain subscription prices are exempt.

Who it applies to
Entities domiciled or doing business in New York that set prices with algorithms using consumer personal data.
Penalties
Civil penalty up to $1,000 per violation; AG cease-and-desist and injunctions.
Enforced by
New York Attorney General
Official name
New York Algorithmic Pricing Disclosure Act (General Business Law section 349-a)
Citation
L. 2025, ch. 58, Part X; N.Y. Gen. Bus. Law section 349-a
Topics
Privacy, AI
Verified 2026-09-25 nysenate.gov nysenate.gov
Research notes

The One Fair Price Act (S.8623B/A.9349B), which would ban surveillance pricing, passed the legislature in June 2026 per the AG; signature not confirmed, so not tracked.

Related

EnactedAlabama
Alabama Personal Data Protection Act (APDPA)Alabama's comprehensive privacy law, enacted April 2026, grants rights to confirm, correct, delete, port and opt out of targeted advertising, sale and profiling. Unusually, it does not require data protection assessments, generally excludes analytics and certain marketing disclosures from 'sale', and broadly exempts small businesses that don't sell data.Next: May 1, 2027 APDPA takes effect · in 6 months
In forceArkansas
Arkansas COPPA 2.0State COPPA-style law that extends protections to teens. Operators of sites and apps directed to children or teens, or with knowledge of their age, face limits on collecting and using their personal information and on targeted advertising.In effect since Jul 1, 2026
AmendedCalifornia
CCPA / CPRAGives California residents (including employees and B2B contacts) rights to know, delete, correct, and opt out of sale/sharing of personal information and to limit use of sensitive personal information. CPPA regulations approved Sept 22, 2025 (effective Jan 1, 2026) add automated decisionmaking technology (ADMT) rights, mandatory risk assessments with submissions to the agency, and annual independent cybersecurity audits. AB 566 (2025) requires browsers to offer an opt-out preference signal from Jan 1, 2027.Next: Jan 1, 2027 ADMT requirements compliance date · in 2 months
In forceCalifornia
California AB 2013 (AI training data transparency)Developers of generative AI systems made publicly available to Californians must post documentation of the training data on their websites. It must cover a high-level summary of the datasets, their sources and owners, the number of data points, the types of data, whether the data includes copyrighted material or personal information, whether it was licensed or purchased, cleaning and processing steps, collection periods, and whether synthetic data was used.In effect since Jan 1, 2026
In forceCalifornia
California ADS employment regulationsClarifies that using an automated-decision system in hiring or other employment decisions can violate the Fair Employment and Housing Act if it discriminates on protected traits. Employers must keep automated-decision data and employment records for at least four years. AI assessments that elicit disability information can be unlawful medical inquiries.In effect since Oct 1, 2025
EnactedCalifornia
California AI Auditor RegistryCreates a state registry for AI auditors run by the Government Operations Agency. From 2029 only registered auditors may offer, sell or conduct covered AI audits, and they must show their registration number in advertising. Registered auditors must file information and follow conduct rules.Next: Jan 1, 2027 Act takes effect · in 2 months
AmendedCalifornia
California AI Transparency Act (SB 942)Covered generative AI providers must offer a free AI-content detection tool, give users the option of a visible (manifest) disclosure on AI-generated image, video or audio, and embed a latent, machine-readable provenance disclosure. Licensees must keep those disclosures intact, and providers must revoke a license within 96 hours of learning a licensee disabled them. AB 853 delayed the operative date to August 2, 2026 and extends duties to large online platforms and GenAI hosting platforms from 2027 and to capture-device makers from 2028.Next: Jan 1, 2027 Large online platform and hosting platform duties · in 2 months
In forceCalifornia
California AI autonomous-harm defense banA defendant that developed, modified or used AI cannot argue in a civil case that the AI acted autonomously and so caused the harm on its own. Other defenses such as causation and comparative fault remain.In effect since Jan 1, 2026
Questions about NY Algorithmic Pricing Disclosure Act
What are the NY Algorithmic Pricing Disclosure Act compliance deadlines?
May 9, 2025: Signed as part of FY2026 budget. Nov 10, 2025: Disclosure duty takes effect.
When does NY Algorithmic Pricing Disclosure Act take effect?
NY Algorithmic Pricing Disclosure Act took effect on Nov 10, 2025.
Who does NY Algorithmic Pricing Disclosure Act apply to?
Entities domiciled or doing business in New York that set prices with algorithms using consumer personal data.
What are the penalties under NY Algorithmic Pricing Disclosure Act?
Civil penalty up to $1,000 per violation; AG cease-and-desist and injunctions.