Law / United States / 
New York
S7695B, New York Child Data Protection Act
N.Y. Gen. Bus. Law art. 39-FF, sections 899-EE to 899-MM (2024 N.Y. Laws ch. 121)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 20 June 2025.
An age-appropriate design code rule binding private bodies.
As of 15 July 2026.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Operators of websites, online services, apps, and connected products may not process, sell, or share the personal data of a user under 18 for targeted advertising, profiling, or other non-essential purposes without informed consent, and must honor browser or device signals indicating a user is a minor. The Attorney General has said it will exercise enforcement discretion for good-faith compliance efforts while final implementing rules remain pending.
If you get it wrong
Private right of actionNo
Penalties
Up to $5,000 per violation, plus injunctive relief, restitution, and disgorgement.
Who enforces it
Enforcement body
New York Attorney General
What it reaches
Age threshold
18
Covered services
Websites, online services, apps, and connected devices directed to or reasonably likely to be used by minors
Verification methods
Device signal
When LexLint raises it
serves_minors
Read the law
official Senate bill text and session law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.