Generates images with AI, in New York

N.Y. Gen. Bus. Law section 899-bb (Article 39-F, added by L. 2019, ch. 117 (S5575-B/A5635-B), section 4) · Read the law's page

• This binds any person or business that owns, licenses, or maintains computerized data including the private information of a New York resident; a business already a compliant regulated entity under Gramm-Leach-Bliley Act Title V regulations, HIPAA and HITECH regulations, or 23 NYCRR Part 500 (the New York Department of Financial Services cybersecurity regulation for a financial-services licensee) is deemed to comply.
• Absent that safe harbor, develop, implement, and maintain a data security program with reasonable administrative safeguards (a designated coordinator, a risk assessment, employee training, vetted service-provider contracts, and periodic adjustment), reasonable technical safeguards (assessing network and software design risk, detecting and responding to attacks, and testing controls), and reasonable physical safeguards (securing storage and disposal and limiting access during and after collection).
• A small business, fewer than 50 employees, under $3,000,000 in gross annual revenue in each of the last three fiscal years, or under $5,000,000 in year-end total assets, may scale its program's administrative, technical, and physical safeguards to its own size, complexity, and the sensitivity of the personal information it collects.
• There is no private right of action; only the Attorney General may enforce this section, as a deemed violation of General Business Law 349, seeking injunctive relief and a civil penalty of up to $5,000 per violation under General Business Law 350-d.

N.Y. Penal Law § 245.15 · Read the law's page

• Do not intentionally disseminate or publish a still or video image, including one created or altered by digitization, that depicts a person's intimate parts or sexual conduct without that person's consent and with intent to cause them emotional, financial or physical harm.

N.Y. Civ. Rights Law § 52-c · Read the law's page

• Do not disclose, disseminate or publish sexually explicit material depicting an identifiable person that was created or altered through digitization, including by artificial intelligence or machine learning, unless that person consented in the manner this section requires.

N.Y. Election Law § 14-106(5) · Read the law's page

• Disclose, in the format this section specifies, when you distribute or publish a political communication produced by or including materially deceptive AI-generated or AI-altered media and you have actual knowledge that it is materially deceptive.

N.Y. Gen. Bus. Law art. 47 (§§ 1700-1704) · Read the law's page

• Give users a clear and conspicuous notification, at the start of an AI companion interaction and at least every three hours of continued use, that they are not communicating with a human.
• Implement a protocol to detect a user's expressions of suicidal ideation or self-harm and refer them to appropriate crisis services such as the 9-8-8 suicide prevention and behavioral health crisis hotline.

N.Y. Civ. Rights Law § 50-f · Read the law's page

• Do not use a deceased performer's digital replica in an audiovisual work, sound recording, or live musical performance without authorization from the applicable right holder.

N.Y. Gen. Bus. Law § 396-b, ch. 617 of 2025 · Read the law's page

• Conspicuously disclose, in an advertisement you produce or create for a sale or a service, that a synthetic performer appears in it, where you have actual knowledge that it does.

N.Y. Civ. Rights Law §§ 50-51 · Read the law's page

• Do not use a living person's name, portrait, picture, likeness, or voice for advertising purposes or for the purposes of trade without first obtaining that person's written consent, or a minor's parent's or guardian's written consent (section 50).
• Obtain the written consent before the use begins: section 51 refers to consent "first obtained" in writing, and the protection is for a living person.
• Treat a use of the name, portrait, picture, likeness, or voice within New York as open to the civil action in section 51, which lets the person restrain the use and recover damages.
• Rely on the exceptions only where they fit: section 51 permits a sound recording's copyright owner to deal in the recording where the right was conferred in writing by the living person or the right holder, and permits use of an author's, composer's, or artist's name, portrait, picture, likeness, or voice with the productions they have sold or disposed of.

N.Y. Gen. Bus. Law (S7263A, passed Senate committee February 2026, pending floor vote)

• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Do not provide a substantive response that, if given by a human, would constitute the unauthorized practice of a licensed profession such as law, medicine, or psychology.
• Conspicuously disclose to users that they are interacting with an AI system rather than a licensed human professional.

N.Y. Gen. Bus. Law art. 44-C (proposed §§ 1430-1432), A6578-B / S6955 · Read the law's page

• Publicly post documentation describing the datasets used to train a generative AI model or service made available to New York users, including their sources, whether they contain copyrighted, personal or aggregate consumer information, the collection period, and whether synthetic data generation was used.

N.Y. Gen. Bus. Law art. 45-A (proposed §§ 1510-1513), S6954-B / A6540 · Read the law's page

• Embed machine-readable provenance data in synthetic content you create or modify with a generative AI system, identifying it as synthetic.
• If you operate a social media platform, do not delete, disassociate from, or degrade the provenance data attached to content a user uploads.

N.Y. Gen. Bus. Law art. 48 (§§ 1800-1805), ch. 368 of 2026 (S9051-B) · Read the law's page

• Do not provide a covered AI companion with unsafe features, as this article defines them, to a covered user unless the user is not a covered minor (a minor you actually know is one) and you have used a permitted age-assurance method to determine that.
• Unsafe features include outputs facilitating suicide, self-harm, disordered eating or sexually explicit conduct or child sexual abuse material, outputs encouraging secrecy or self-isolation, deceiving a minor about the companion's non-human nature, and engagement-optimizing outputs that override the companion's own safety guardrails.