Establishes a private right of action for any person whose personally identifying information was intentionally disclosed by another individual, without consent, for the purpose of harassing, threatening, intimidating, or causing harm to such person, or with reckless disregard as to whether such disclosure would cause such harm; defines personal information.
STATE OF NEW YORK
________________________________________________________________________
10091
IN ASSEMBLY
January 30, 2026
___________
Introduced by M. of A. KASSAY -- read once and referred to the Committee
on Judiciary
AN ACT to amend the civil rights law, in relation to establishing a
private right of action for malicious disclosure of personally identi-
fying information by another individual
The People of the State of New York, represented in Senate and Assem-bly, do enact as follows:
1 Section 1. The civil rights law is amended by adding a new section
2 52-e to read as follows:
3 § 52-e. Private right of action for malicious disclosure of personally
4 identifying information. 1. Any person whose personally identifying
5 information was intentionally disclosed by another individual, without
6 consent, for the purpose of harassing, threatening, intimidating, or
7 causing harm to such person, or with reckless disregard as to whether
8 such disclosure would cause such harm, shall have a cause of action
9 against the individual who disclosed such information, where such
10 disclosure resulted in one or more of the following:
11 a. harassment;
12 b. physical harm;
13 c. substantial emotional distress;
14 d. threats or fear of violence;
15 e. stalking; or
16 f. damage to such person's property or livelihood.
17 2. In any action commenced pursuant to subdivision one of this
18 section, the finder of fact, in its discretion, may award injunctive or
19 declaratory relief, actual damages including financial losses and
20 emotional distress, punitive damages not to exceed fifty thousand
21 dollars, and reasonable court costs and attorney's fees.
22 3. This section shall not apply to:
23 a. the reporting of unlawful conduct;
24 b. disclosures made during lawful and common practices of law enforce-
25 ment or legal proceedings;
26 c. disclosures made pursuant to a lawful subpoena, warrant, or court
27 order; or
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[] is old law to be omitted.
LBD14505-01-6
A. 10091 2
1 d. disclosures made in connection with matters of legitimate public
2 concern, including news reporting, commentary, or expressive activity
3 protected under the United States constitution or the constitution of
4 the state of New York.
5 4. The fact that personally identifying information was previously
6 made available to the public, in whole or in part, shall not, by itself,
7 constitute a defense to liability under this section, where the defend-
8 ant intentionally disclosed such information with the intent to cause,
9 or with reckless disregard as to whether such disclosure would cause,
10 the harms described in subdivision one of this section.
11 5. Nothing herein shall be read to require a prior criminal complaint,
12 prosecution, or conviction to establish the elements of the cause of
13 action provided for by this section.
14 6. The provisions of this section are in addition to, but shall not
15 supersede, any other rights or remedies available in law or equity.
16 7. If any provision of this section or its application to any person
17 or circumstance is held invalid, such invalidity shall not affect other
18 provisions or applications of this section which can be given effect
19 without the invalid provision or application, and to this end the
20 provisions of this section are severable.
21 8. Nothing in this section shall be construed to limit, or to enlarge,
22 the protections that 47 U.S.C. § 230 confers on an interactive computer
23 service for content provided by another information content provider, as
24 such terms are defined in 47 U.S.C. § 230.
25 9. For purposes of this section:
26 a. "Personally identifying information" means any information that
27 identifies, relates to, describes, or is capable of being associated
28 with a specific individual and is not otherwise lawfully made publicly
29 available through government records or widely accessible public sourc-
30 es. Such information includes, but is not limited to:
31 (i) a home address or physical residence;
32 (ii) a personal telephone number;
33 (iii) a personal email address;
34 (iv) a social security number;
35 (v) financial account or bank account numbers;
36 (vi) driver's license or state identification number;
37 (vii) biometric data; or
38 (viii) geolocation data sufficient to identify an individual's home,
39 workplace, school, or other habitual location.
40 b. "Disclose" means to publish, post, transmit, or otherwise make
41 available information to another person, either electronically, in
42 print, or through any medium of communication.
43 § 2. This act shall take effect on the first of January next succeed-
44 ing the date upon which it shall have become a law.
