NY Child Data Protection Act
In force New York · In force Jun 20, 2025 · no upcoming deadlines
Deadlines
| Date | What happens | When |
|---|---|---|
| Jun 20, 20251 year ago | Takes effect | 15 months ago |
| Jun 20, 20242 years ago | Signed by Governor | 2.3 years ago |
Summaries for reference, not legal advice. Check the official text.
What it does
Online operators may not collect, use, share or sell personal data of users under 18 unless it is strictly necessary for the service or they obtain informed consent. It covers sites and apps directed to minors or with actual knowledge that a user is a minor.
- Who it applies to
- Operators of websites, online services, apps and connected devices, and their processors, handling data of New York minors.
- Penalties
- Civil penalties up to $5,000 per violation, damages and injunctions.
- Enforced by
- New York Attorney General
- Official name
- New York Child Data Protection Act
- Citation
- L. 2024, ch. 121 (S7695B); N.Y. Gen. Bus. Law Article 45-A
- Topics
- children, privacy
Research notes
The AG's July 2026 SAFE release confirms the Child Data Protection Act is in effect.
Related
Questions about NY Child Data Protection Act
- What are the NY Child Data Protection Act compliance deadlines?
- Jun 20, 2024: Signed by Governor. Jun 20, 2025: Takes effect.
- When does NY Child Data Protection Act take effect?
- NY Child Data Protection Act took effect on Jun 20, 2025.
- Who does NY Child Data Protection Act apply to?
- Operators of websites, online services, apps and connected devices, and their processors, handling data of New York minors.
- What are the penalties under NY Child Data Protection Act?
- Civil penalties up to $5,000 per violation, damages and injunctions.