Ren Art 45-A to be Art 45-B, add Art 45-A §§1509 - 1517, Gen Bus L
Establishes the "stop online predators act"; requires operators of covered platforms to conduct age verification to determine whether a user is a covered minor; requires operators of covered platforms to utilize certain default privacy settings for covered minors; requires operators of covered platforms to require parental approval of certain activity related to a covered minor's covered platform account.
STATE OF NEW YORK
________________________________________________________________________
6549--A
2025-2026 Regular Sessions
IN ASSEMBLY
March 6, 2025
___________
Introduced by M. of A. ROZIC, TAYLOR, STECK, ALVAREZ, LUNSFORD, WIEDER,
LEE, HOOKS, McDONALD, SEAWRIGHT, JENSEN, BEEPHAN -- read once and
referred to the Committee on Consumer Affairs and Protection --
reported and referred to the Committee on Codes -- recommitted to the
Committee on Codes in accordance with Assembly Rule 3, sec. 2 --
committee discharged, bill amended, ordered reprinted as amended and
recommitted to said committee
AN ACT to amend the general business law, in relation to establishing
the stop online predators act
The People of the State of New York, represented in Senate and Assem-bly, do enact as follows:
1 Section 1. Short title. This act shall be known and may be cited as
2 the "stop online predators act".
3 § 2. Article 45-A of the general business law is renumbered article
4 45-B and a new article 45-A is added to read as follows:
5 ARTICLE 45-A
6 STOP ONLINE PREDATORS ACT
7 Section 1509. Definitions.
8 1510. Privacy by default.
9 1511. Parental approvals.
10 1512. Construction of article.
11 1513. Prohibition on dark patterns.
12 1514. Nondiscrimination.
13 1515. Scope.
14 1516. Rulemaking authority.
15 1517. Remedies.
16 § 1509. Definitions. For the purposes of this article, the following
17 terms shall have the following meanings:
18 1. "Adult" shall mean a natural person who is eighteen years of age or
19 older.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[] is old law to be omitted.
LBD07773-06-6
A. 6549--A 2
1 2. "Connected" and variations thereof shall mean that a covered minor
2 and/or such covered minor's parent has previously approved a connection
3 with another user such that such other user may privately contact the
4 covered minor; provided, however, that nothing in this subdivision shall
5 prevent a covered platform from allowing such other user to send a
6 private communication to accompany such other user's initial request for
7 connection with a covered minor.
8 3. "Covered minor" shall mean any user who is determined by an opera-
9 tor, via one or more commercially reasonable age verification methods,
10 to be under the age of eighteen.
11 4. "Covered platform" shall mean a public or semi-public website,
12 online service, online application, or mobile application that (a) is
13 used by a covered minor in this state, (b) allows users to construct a
14 public or semi-public profile for the purposes of using such website,
15 service, or application, (c) allows users to create or post content that
16 is viewable by other users, including but not limited to, on message
17 boards, in chat rooms, or through a landing page or main feed that
18 presents the user with content generated by other users, and (d) allows
19 users to privately message each other as a significant part of the
20 provision of such website, service, or application.
21 5. "False negative" shall mean when an age verification method incor-
22 rectly identifies an adult as a minor.
23 6. "False positive" shall mean when an age verification method incor-
24 rectly identifies a minor as an adult.
25 7. "Financial transaction" shall mean a transaction between users
26 involving any type of currency, including virtual currency, used within
27 a covered platform whether or not it can be converted to fiat money.
28 8. "Media" shall mean text, images, or video.
29 9. "Method circumvention" shall mean submission of false data or
30 interference with an age verification method.
31 10. "Minor" shall mean a natural person who is under the age of eigh-
32 teen.
33 11. "Operator" shall mean any person, business, or other legal entity
34 who operates or provides a covered platform.
35 12. "Parent" shall mean a parent or legal guardian.
36 13. "Syncing" shall mean when a user imports existing connections or
37 contact information pertaining to other users into a covered platform.
38 14. "Tag" shall mean when a user identifies a second user in posted
39 content in a manner that links to the second user's profile.
40 15. "User" shall mean a user of a covered platform in New York not
41 acting as an operator, or agent or affiliate of such operator, of such
42 platform or any portion thereof.
43 § 1510. Privacy by default. 1. No operator shall offer a covered plat-
44 form in this state without conducting commercially reasonable age
45 verification to determine whether a user is a covered minor. The attor-
46 ney general shall promulgate regulations identifying methods for commer-
47 cially reasonable, privacy protective, and technically feasible age
48 verification, which shall consider the size, financial resources, and
49 technical capabilities of covered platforms, the costs and effectiveness
50 of available age determination techniques for users of such platforms,
51 and the audience of such platforms. Such methods shall meet commercial-
52 ly reasonable accuracy minimums, to be prescribed by the attorney gener-
53 al, that can reduce instances of false negatives and false positives and
54 detect and prevent method circumvention in light of available technology
55 and existing legal obligations of covered platforms to conduct age
56 verification. Information collected for the purpose of determining a
A. 6549--A 3
1 covered user's age under this subdivision shall not be used for any
2 purpose other than age determination and shall be deleted immediately
3 after an attempt to determine a covered user's age, except where neces-
4 sary for compliance with any applicable provisions of state or federal
5 law or regulation.
6 2. For all users determined under a commercially reasonable age
7 verification method by an operator to be a covered minor, such operator
8 shall utilize the following settings by default for covered minors,
9 which shall ensure that no user who is not already connected to a
10 covered minor may:
11 (a) communicate directly and privately within the covered platform
12 with such minor;
13 (b) view the full profile of such minor;
14 (c) tag such minor in posted content;
15 (d) view the geographic location of such minor if a covered platform
16 provides a mechanism by which users share their locations within such
17 platform;
18 (e) download media posted by a covered minor on such minor's profile;
19 and/or
20 (f) engage in a financial transaction with such minor.
21 3. No operator shall suggest or recommend the profile of a covered
22 minor to another user not already connected to another minor; provided,
23 however, that this subdivision shall not apply to profile suggestions or
24 recommendations that are made as a result of a covered minor or user
25 syncing contacts with a covered platform.
26 4. A parent of a covered minor or a covered minor themself may over-
27 ride the default privacy settings provided in subdivisions two and three
28 of this section, provided, however, that if the covered minor is deter-
29 mined by an operator to be under the age of sixteen, a parent of such
30 minor must approve any privacy setting that is less protective than that
31 prescribed in subdivisions two and three of this section. If a covered
32 minor is determined by an operator to be at least the age of sixteen but
33 under the age of eighteen, a parent of such minor shall be notified when
34 such minor overrides the default privacy settings provided in subdivi-
35 sions two and three of this section to a setting that is less protective
36 than that prescribed in such subdivisions, but approval from such parent
37 shall not be required for such override.
38 § 1511. Parental approvals. 1. For all users determined by an operator
39 to be under the age of thirteen, such operator shall require the parent
40 of such covered minor to approve all new connections with such covered
41 minor before such covered minor's and such other user's accounts may be
42 connected. For covered minors under the age of thirteen, an operator
43 shall also establish a mechanism by which a parent of such minor may
44 easily view the list of all users currently connected with the account
45 of the minor.
46 2. For all users determined by an operator to be a covered minor, such
47 operator shall require a parent to approve all financial transactions
48 relating to such covered minor's account. Such operator shall further
49 establish a mechanism by which a parent of a covered minor may easily
50 view a history of all financial transactions relating to such covered
51 minor's account at any time.
52 § 1512. Construction of article. Nothing in this article shall be
53 construed to prohibit an operator from instituting a privacy setting for
54 covered minors and/or other users that is more protective than that
55 required by this section.
A. 6549--A 4
1 § 1513. Prohibition on dark patterns. It shall be unlawful for a
2 covered platform to deploy any mechanism or design which intentionally
3 inhibits the purpose of this article, subverts user and/or parent choice
4 or autonomy, or renders it more difficult for a user and/or parent to
5 exercise any of the prescribed rights and/or privileges provided in this
6 article.
7 § 1514. Nondiscrimination. An operator shall not withhold, degrade,
8 lower the quality of, or increase the price of any product, service, or
9 feature of a covered platform, other than as necessary for compliance
10 with the provisions of this article or any rules or regulations promul-
11 gated pursuant to this article, to a user due to such operator being
12 required to establish the settings and approvals provided in sections
13 fifteen hundred ten and fifteen hundred eleven of this article.
14 § 1515. Scope. 1. This article shall apply to conduct that occurs in
15 whole or in part in New York. For purposes of this article, conduct
16 takes place wholly outside of New York if the covered platform is
17 accessed by a user who is physically located outside of New York.
18 2. Nothing in this article shall be construed to impose liability for
19 commercial activities or actions by operators subject to 15 U.S.C. §
20 6501 that is inconsistent with the treatment of such activities or
21 actions under 15 U.S.C. § 6502.
22 § 1516. Rulemaking authority. The attorney general shall promulgate
23 such rules and regulations as are necessary to effectuate and enforce
24 the provisions of this article.
25 § 1517. Remedies. 1. On or after the effective date of this article,
26 whenever it appears to the attorney general, upon complaint or other-
27 wise, that any person, within or outside the state, has violated the
28 provisions of this article, the attorney general may bring an action or
29 special proceeding in the name and on behalf of the people of the state
30 of New York to enjoin any such violation, to obtain restitution of any
31 moneys or property obtained directly or indirectly by any such
32 violation, to obtain disgorgement of any profits or gains obtained
33 directly or indirectly by any such violation, to obtain damages caused
34 directly or indirectly by any such violation, to obtain civil penalties
35 of up to five thousand dollars per violation, and to obtain any such
36 other and further relief as the court may deem proper, including prelim-
37 inary relief.
38 2. The attorney general shall maintain a website to receive
39 complaints, information, and/or referrals from members of the public
40 concerning an operator's or covered platform's alleged compliance or
41 noncompliance with the provisions of this article.
42 § 3. Severability. If any clause, sentence, paragraph, subdivision,
43 section or part of this act shall be adjudged by any court of competent
44 jurisdiction to be invalid, such judgment shall not affect, impair, or
45 invalidate the remainder thereof, but shall be confined in its operation
46 to the clause, sentence, paragraph, subdivision, section or part thereof
47 directly involved in the controversy in which such judgment shall have
48 been rendered. It is hereby declared to be the intent of the legislature
49 that this act would have been enacted even if such invalid provisions
50 had not been included herein.
51 § 4. This act shall take effect on the one hundred eightieth day after
52 the office of the attorney general shall promulgate rules and regu-
53 lations necessary to effectuate the provisions of this act; provided
54 that the office of the attorney general shall notify the legislative
55 bill drafting commission upon the occurrence of the enactment of the
56 rules and regulations necessary to effectuate and enforce the provisions
A. 6549--A 5
1 of section two of this act in order that the commission may maintain an
2 accurate and timely effective data base of the official text of the laws
3 of the state of New York in furtherance of effectuating the provisions
4 of section 44 of the legislative law and section 70-b of the public
5 officers law. Effective immediately, the addition, amendment and/or
6 repeal of any rule or regulation necessary for the implementation of
7 this act on its effective date are authorized to be made and completed
8 on or before such effective date.
