Data, privacy and AI rules

12 due in 60 days · 190 regulations

NY RAISE Act

Enacted New York · In force Jan 1, 2027 · next deadline Jan 1, 2027 (in 2 months)

Deadlines

Coming up
Takes effectJan 1, 2027 · in 2 months · Source
RAISE Act takes effectTransparency reports, frontier AI frameworks, incident reporting and DFS disclosure filings apply.
Already passed
MilestoneMar 27 · 7 months ago · Source
Chapter amendment S8828 signedChapter amendment (ch. 96) finalizes the RAISE Act text.
MilestoneDec 19, 2025 · 10 months ago · Source
RAISE Act signedGovernor Hochul signs the RAISE Act with an agreed chapter amendment.

Summaries for reference, not legal advice. Check the official text.

What it does

Frontier AI developers must publish transparency reports when they deploy models and report critical safety incidents to a new DFS oversight office within 72 hours, or within 24 hours to authorities where there is imminent risk of death or injury. Large frontier developers must also publish and annually update a Frontier AI Framework, submit catastrophic-risk assessments, file disclosure statements with DFS every two years, and pay a share of the office's costs. The March 2026 chapter amendment realigned the law closely with California SB 53.

Who it applies to
Frontier developers training models with more than 10^26 FLOPs; large frontier developers are those with $500 million or more in prior-year revenue, including affiliates.
Penalties
Civil penalties up to $1,000,000 for a first violation and up to $3,000,000 for subsequent violations, sought by the AG. The DFS office may fine $1,000 per day after notice and hearing for failing to file a disclosure statement.
Enforced by
New York Attorney General; DFS AI oversight office (disclosure filings, assessments, regulations)
Official name
New York Responsible AI Safety and Education (RAISE) Act (S6953-B/A6453-B of 2025), as amended by chapter amendment S8828 of 2026
Citation
S6953-B/A6453-B (2025); S8828 (2026, chapter amendment, Laws of 2026 ch. 96); N.Y. Gen. Bus. Law Art. 44-B
Topics
AI
Verified 2026-09-22 nysenate.gov wiley.law dwt.com
Research notes

nysenate.gov confirms S8828 was signed March 27, 2026 as chapter 96, effective January 1, 2027. Some commentary cites July 1, 2027 for certain provisions; that was not confirmed. The first DFS annual report is due in January 2028 (exact day not verified).

Related

AmendedCalifornia
CCPA / CPRAGives California residents (including employees and B2B contacts) rights to know, delete, correct, and opt out of sale/sharing of personal information and to limit use of sensitive personal information. CPPA regulations approved Sept 22, 2025 (effective Jan 1, 2026) add automated decisionmaking technology (ADMT) rights, mandatory risk assessments with submissions to the agency, and annual independent cybersecurity audits. AB 566 (2025) requires browsers to offer an opt-out preference signal from Jan 1, 2027.Next: Jan 1, 2027 ADMT requirements compliance date · in 2 months
In forceCalifornia
California AB 2013 (AI training data transparency)Developers of generative AI systems made publicly available to Californians must post documentation of the training data on their websites. It must cover a high-level summary of the datasets, their sources and owners, the number of data points, the types of data, whether the data includes copyrighted material or personal information, whether it was licensed or purchased, cleaning and processing steps, collection periods, and whether synthetic data was used.In effect since Jan 1, 2026
In forceCalifornia
California ADS employment regulationsClarifies that using an automated-decision system in hiring or other employment decisions can violate the Fair Employment and Housing Act if it discriminates on protected traits. Employers must keep automated-decision data and employment records for at least four years. AI assessments that elicit disability information can be unlawful medical inquiries.In effect since Oct 1, 2025
EnactedCalifornia
California AI Auditor RegistryCreates a state registry for AI auditors run by the Government Operations Agency. From 2029 only registered auditors may offer, sell or conduct covered AI audits, and they must show their registration number in advertising. Registered auditors must file information and follow conduct rules.Next: Jan 1, 2027 Act takes effect · in 2 months
AmendedCalifornia
California AI Transparency Act (SB 942)Covered generative AI providers must offer a free AI-content detection tool, give users the option of a visible (manifest) disclosure on AI-generated image, video or audio, and embed a latent, machine-readable provenance disclosure. Licensees must keep those disclosures intact, and providers must revoke a license within 96 hours of learning a licensee disabled them. AB 853 delayed the operative date to August 2, 2026 and extends duties to large online platforms and GenAI hosting platforms from 2027 and to capture-device makers from 2028.Next: Jan 1, 2027 Large online platform and hosting platform duties · in 2 months
In forceCalifornia
California AI autonomous-harm defense banA defendant that developed, modified or used AI cannot argue in a civil case that the AI acted autonomously and so caused the harm on its own. Other defenses such as causation and comparative fault remain.In effect since Jan 1, 2026
In forceCalifornia
California SB 243 (companion chatbots)Operators of companion chatbot platforms must clearly disclose that the chatbot is AI where a user could reasonably think they are talking to a human. They must keep and publish protocols that prevent suicidal-ideation and self-harm content and refer users to crisis services. For known minors, operators must disclose AI use, remind them every three hours to take a break, and block sexually explicit content. Annual reports to the Office of Suicide Prevention begin July 1, 2027.Next: Jul 1, 2027 First annual report to Office of Suicide Prevention · in 8 months
In forceCalifornia
California SB 53 (TFAIA)Frontier AI developers must publish transparency reports when deploying new or substantially modified frontier models and report critical safety incidents to the Office of Emergency Services (OES). Large frontier developers must also write, implement and publish a frontier AI framework for catastrophic risk, update it annually, and send OES quarterly summaries of their catastrophic-risk assessments. The act also adds whistleblower protections and creates the CalCompute public computing consortium.Next: Jan 1, 2027 First OES anonymized incident report and CDT definition review · in 2 months
Questions about NY RAISE Act
What are the NY RAISE Act compliance deadlines?
Dec 19, 2025: RAISE Act signed. Mar 27, 2026: Chapter amendment S8828 signed. Jan 1, 2027: RAISE Act takes effect.
When does NY RAISE Act take effect?
NY RAISE Act takes effect on Jan 1, 2027. The next milestone is Jan 1, 2027: RAISE Act takes effect.
Who does NY RAISE Act apply to?
Frontier developers training models with more than 10^26 FLOPs; large frontier developers are those with $500 million or more in prior-year revenue, including affiliates.
What are the penalties under NY RAISE Act?
Civil penalties up to $1,000,000 for a first violation and up to $3,000,000 for subsequent violations, sought by the AG. The DFS office may fine $1,000 per day after notice and hearing for failing to file a disclosure statement.