Online Privacy in New York: Laws, Rights & Protection Guide

Current New York Privacy Laws

**SHIELD Act (2019):**

The Stop Hacks and Improve Electronic Data Security Act requires: - Reasonable data security measures for NY resident data - Expanded breach notification requirements - Applies to any business with NY customer data

**What SHIELD Covers:** - Social Security numbers - Driver's license numbers - Financial account information - Biometric data - Email addresses with passwords

**Consumer Rights (Limited):**

Currently, New Yorkers have: - Right to breach notification - Right to data security - Some industry-specific protections (healthcare, financial)

**What's Missing:**

Unlike California, New York lacks: - Right to know what data companies collect - Right to delete personal data - Right to opt out of data sales - Private right of action for violations

The New York Digital Privacy Act (NYDPA)

**Proposed Protections:**

If passed, NYDPA would provide: - Right to access personal data - Right to deletion - Right to correct inaccurate data - Right to data portability - Right to opt out of data sales

**Stronger Than CCPA:**

NYDPA would exceed California protections: - No revenue threshold (applies to all businesses) - Opt-in consent for sensitive data - Data minimization requirements - Private right of action

**Current Status:**

The bill has been introduced multiple legislative sessions. Strong lobbying both for and against. Consumer advocacy groups pushing for passage.

**Regardless of Legislation:**

While waiting for stronger laws, New Yorkers can: - Use temporary email for signups - Minimize data sharing - Use privacy tools proactively - Exercise existing rights where available

Practical Privacy for New Yorkers

**Daily Digital Life:**

Living in NYC means constant data collection: - MTA card links to your travel patterns - Citi Bike requires email and location - Building entry systems log comings and goings - Countless WiFi networks track presence

**Strategic Data Minimization:**

**Transportation:** - Pay cash for MetroCards when possible - Use temp email for Citi Bike - Avoid connecting to MTA WiFi

**Shopping:** - Temp email for store loyalty programs - Cash or prepaid cards for sensitive purchases - Opt out of receipt email at checkout

**Entertainment:** - Temp email for event ticket purchases - VPN for location-sensitive content - Minimal social media exposure

**Services:** - Temp email for delivery apps when testing - Review permissions on utility apps - Limit smart device data collection

NYC-Specific Considerations

**Public WiFi Risks:**

NYC has extensive public WiFi (LinkNYC, subway, etc.): - Always use VPN on public networks - Assume all traffic is monitored - Disable auto-connect on phone - Be cautious of network names

**Smart Building Privacy:**

Modern NYC buildings collect data: - Entry/exit times - Package deliveries - Guest logs - Energy usage patterns

Limit what you can, accept what you can't.

**Surveillance Landscape:**

NYC has extensive surveillance: - NYPD Domain Awareness System - Private security cameras - Traffic monitoring - Facial recognition (partially banned)

Digital privacy is the privacy you can control.

Exercising Current Rights

**Under SHIELD Act:**

If you're a breach victim: - Companies must notify you promptly - You may have legal recourse - Document everything - Consider credit monitoring

**Industry-Specific Rights:**

**Financial Services (NY DFS):** - Regulated cybersecurity requirements - Strict data protection standards - Complaint process available

**Healthcare (HIPAA + NY):** - Protected health information rights - Access and amendment rights - Complaint to HHS and NY AG

**Making Complaints:**

New York Attorney General's office handles: - Consumer protection violations - Data breach failures - Deceptive practices

File at ag.ny.gov

Building Your Privacy Stack

**Essential Tools:**

1. **Temporary Email**: TempMailSpot for signups 2. **VPN**: Essential for NYC WiFi 3. **Password Manager**: 1Password or Bitwarden 4. **Secure Browser**: Firefox with privacy extensions 5. **Encrypted Messaging**: Signal for sensitive communication

**Progressive Privacy:**

**Week 1:** - Start using temp email for new signups - Install VPN and use on public WiFi - Review app permissions

**Week 2:** - Audit existing accounts - Unsubscribe from unwanted emails - Set up password manager

**Week 3:** - Delete unused accounts - Request data from major services - Review social media privacy settings

**Ongoing:** - Temp email for all exploration - Real email only for essential services - Regular privacy audits