S T A T E O F N E W Y O R K
________________________________________________________________________
8102--A
2025-2026 Regular Sessions
I N S E N A T E
May 15, 2025
___________
Introduced by Sen. GOUNARDES -- read twice and ordered printed, and when
printed to be committed to the Committee on Consumer Protection --
recommitted to the Committee on Consumer Protection in accordance with
Senate Rule 6, sec. 8 -- committee discharged, bill amended, ordered
reprinted as amended and recommitted to said committee
AN ACT to amend the general business law, in relation to device-level
age assurance
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. The general business law is amended by adding a new article
45-B to read as follows:
ARTICLE 45-B
DEVICE-LEVEL AGE ASSURANCE
SECTION 1540. DEFINITIONS.
1541. OBLIGATIONS FOR COVERED MANUFACTURERS.
1542. OBLIGATIONS FOR COVERED DEVELOPERS.
1543. NONDISCRIMINATION.
1544. DATA SECURITY.
1545. RULEMAKING AUTHORITY.
1546. SCOPE.
1547. ENFORCEMENT.
§ 1540. DEFINITIONS. FOR THE PURPOSES OF THIS ARTICLE, THE FOLLOWING
TERMS SHALL HAVE THE FOLLOWING MEANINGS:
1. "AGE ASSURANCE" SHALL MEAN ANY METHOD TO REASONABLY DETERMINE THE
AGE CATEGORY OF A USER, USING METHODS THAT REASONABLY PREVENT AGAINST
CIRCUMVENTION. SUCH METHOD MAY INCLUDE A METHOD THAT MEETS THE REQUIRE-
MENTS OF ARTICLE FORTY-FIVE OF THIS CHAPTER, OR MAY BE A METHOD THAT IS
IDENTIFIED PURSUANT TO NEW REGULATIONS PROMULGATED BY THE ATTORNEY
GENERAL CONSISTENT WITH SECTION FIFTEEN HUNDRED FORTY-FIVE OF THIS ARTI-
CLE.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD13065-07-6
S. 8102--A 2
2. "AGE CATEGORY" SHALL MEAN DATA THAT A USER IS (A) UNDER THE AGE OF
THIRTEEN YEARS; (B) AT LEAST THIRTEEN BUT UNDER SIXTEEN YEARS; (C) AT
LEAST SIXTEEN BUT UNDER EIGHTEEN YEARS; OR (D) AT LEAST EIGHTEEN YEARS.
3. "APPLICATION PROGRAMMING INTERFACE" OR "API" SHALL MEAN A SYSTEM
THAT ALLOWS TWO OR MORE SOFTWARE SYSTEMS TO COMMUNICATE AND EXCHANGE
INFORMATION, FEATURES, AND FUNCTIONALITY.
4. "APPLICATION STORE" SHALL MEAN A PUBLICLY AVAILABLE WEBSITE, SOFT-
WARE APPLICATION, OR ONLINE SERVICE THAT DISTRIBUTES THIRD PARTY PLAT-
FORMS' SOFTWARE APPLICATIONS TO AN INTERNET-ENABLED DEVICE.
5. "COVERED DEVELOPER" SHALL MEAN A PERSON WHO OWNS OR CONTROLS A
WEBSITE, ONLINE SERVICE, ONLINE APPLICATION, MOBILE APPLICATION, OR
PORTION THEREOF THAT IS ACCESSED BY A USER IN THE STATE OF NEW YORK.
6. "COVERED MANUFACTURER" SHALL MEAN A MANUFACTURER OF AN INTERNET-EN-
ABLED DEVICE, AN OPERATING SYSTEM PROVIDER, OR AN APPLICATION STORE.
7. "COVERED MINOR" SHALL MEAN A USER OF AN INTERNET-ENABLED DEVICE WHO
A COVERED MANUFACTURER HAS DETERMINED VIA ONE OR MORE COMMERCIALLY
REASONABLE AGE ASSURANCE METHODS TO BE UNDER THE AGE OF EIGHTEEN.
8. "INTERNET-ENABLED DEVICE" SHALL MEAN AND INCLUDE ANY DESKTOP,
LAPTOP, SMARTPHONE, TABLET, OR OTHER DEVICE CAPABLE OF CONNECTING TO THE
INTERNET AND ENABLING THE USER TO ACCESS CONTENT ON THE INTERNET,
INCLUDING A SOCIAL MEDIA PLATFORM.
9. "OPERATING SYSTEM" SHALL MEAN THE SYSTEM SOFTWARE THAT MANAGES THE
HARDWARE OF AN INTERNET-ENABLED DEVICE AND ALLOWS PROGRAMS AND APPLICA-
TIONS TO RUN ON SUCH DEVICE.
10. "OPERATING SYSTEM PROVIDER" SHALL MEAN ANY PERSON, PARTNERSHIP,
ASSOCIATION, FIRM, BUSINESS, OR OTHER LEGAL ENTITY, OR ANY MEMBER THERE-
OF, WHO DEVELOPS, DISTRIBUTES, AND/OR MAINTAINS AN INTERNET-ENABLED
DEVICE'S OPERATING SYSTEM, INCLUDING BUT NOT LIMITED TO THE DESIGN,
PROGRAMMING, OR SUPPLY OF OPERATING SYSTEMS FOR INTERNET-ENABLED
DEVICES.
11. "SOCIAL MEDIA PLATFORM" SHALL HAVE THE SAME MEANING AS IN SUBDIVI-
SION FIVE OF SECTION ELEVEN HUNDRED OF THIS CHAPTER.
§ 1541. OBLIGATIONS FOR COVERED MANUFACTURERS. 1. UPON ACTIVATION OF
AN INTERNET-ENABLED DEVICE AFTER THE EFFECTIVE DATE OF THIS ARTICLE, A
COVERED MANUFACTURER SHALL CONDUCT AGE ASSURANCE TO DETERMINE A USER'S
AGE CATEGORY AT THE POINT OF SUCH ACTIVATION. FOR DEVICES THAT WERE
ACTIVATED PRIOR TO THE EFFECTIVE DATE OF THIS ARTICLE, HOWEVER, SUCH
COVERED MANUFACTURER SHALL CONDUCT THE AGE ASSURANCE DESCRIBED HEREIN ON
OR BEFORE SUCH EFFECTIVE DATE.
2. A COVERED MANUFACTURER SHALL PROVIDE A COVERED DEVELOPER WITH A
DIGITAL SIGNAL INDICATING THE AGE CATEGORY OF A USER VIA A REAL-TIME
APPLICATION PROGRAMMING INTERFACE (API) UPON RECEIVING A REQUEST FOR
SUCH SIGNAL FROM SUCH DEVELOPER.
3. A COVERED MANUFACTURER SHALL ENSURE THAT, FOR ANY INTERNET-ENABLED
DEVICES SOLD AFTER THE EFFECTIVE DATE OF THIS ARTICLE, THE REQUIREMENTS
OF THIS SECTION ARE INCLUDED IN ANY OPERATING SYSTEM AND APPLICATION
STORE UPDATES BY DEFAULT AFTER SUCH EFFECTIVE DATE.
§ 1542. OBLIGATIONS FOR COVERED DEVELOPERS. 1. ALL COVERED DEVELOPERS
SHALL REQUEST AN AGE CATEGORY SIGNAL FOR A USER FROM A COVERED MANUFAC-
TURER WHEN SUCH USER DOWNLOADS AND LAUNCHES SUCH DEVELOPER'S WEBSITE,
SERVICE, OR APPLICATION.
2. IF THE SIGNAL INDICATES THAT A USER IS A COVERED MINOR, THEN SUCH
COVERED DEVELOPER SHALL TREAT SUCH SIGNAL AS AN AUTHORITATIVE INDICATOR
OF SUCH USER'S AGE FOR THE PURPOSES OF COMPLIANCE WITH ANY APPLICABLE
LAW AND THE COVERED DEVELOPER SHALL BE DEEMED TO HAVE ACTUAL KNOWLEDGE
THAT A USER IS A COVERED MINOR ACROSS ALL PLATFORMS AND POINTS OF ACCESS
S. 8102--A 3
OF THE WEBSITE, SERVICE, OR APPLICATION; PROVIDED, HOWEVER, THAT A
COVERED DEVELOPER SHALL NOT WILLFULLY DISREGARD CLEAR AND CONVINCING
INFORMATION OTHERWISE AVAILABLE TO THE DEVELOPER THAT INDICATES A USER'S
AGE IS DIFFERENT THAN THAT INDICATED BY THE AGE CATEGORY SIGNAL PROVIDED
BY A COVERED MANUFACTURER.
§ 1543. NONDISCRIMINATION. 1. A COVERED MANUFACTURER SHALL IMPOSE AT
LEAST THE SAME RESTRICTIONS AND OBLIGATIONS ON ITS OWN WEBSITES, APPLI-
CATIONS, AND ONLINE SERVICES AS IT IMPOSES ON THE WEBSITES, APPLICA-
TIONS, AND ONLINE SERVICES OF THIRD PARTIES.
2. A COVERED MANUFACTURER SHALL NOT WITHHOLD, DEGRADE, LOWER THE QUAL-
ITY, OR INCREASE THE PRICE OF ANY PRODUCT, SERVICE, OR FEATURE TO A USER
DUE TO THE PROVISIONS OF THIS ARTICLE, OTHER THAN AS NECESSARY FOR
COMPLIANCE WITH THE PROVISIONS OF THIS ARTICLE.
§ 1544. DATA SECURITY. 1. A COVERED MANUFACTURER OR COVERED DEVELOPER
SHALL DELETE ALL INFORMATION COLLECTED FOR THE PURPOSES OF THIS ARTICLE
AFTER SUCH PURPOSE HAS BEEN ACHIEVED, EXCEPT WHERE NECESSARY FOR COMPLI-
ANCE WITH APPLICABLE PROVISIONS OF LAW OR REGULATION.
2. ALL DIGITAL SIGNALS TRANSMITTED PURSUANT TO SECTIONS FIFTEEN
HUNDRED FORTY-ONE AND FIFTEEN HUNDRED FORTY-TWO OF THIS ARTICLE SHALL BE
ENCRYPTED TO ENSURE DATA INTEGRITY AND SECURITY.
§ 1545. RULEMAKING AUTHORITY. THE ATTORNEY GENERAL MAY PROMULGATE SUCH
RULES AND REGULATIONS AS ARE NECESSARY TO EFFECTUATE AND ENFORCE THE
PROVISIONS OF THIS ARTICLE.
§ 1546. SCOPE. THIS ARTICLE SHALL APPLY TO CONDUCT THAT OCCURS IN
WHOLE OR IN PART IN NEW YORK. FOR PURPOSES OF THIS ARTICLE, CONDUCT
TAKES PLACE WHOLLY OUTSIDE OF NEW YORK WHEN AN INTERNET-ENABLED DEVICE,
AN OPERATING SYSTEM PROVIDER, OR AN APPLICATION STORE IS ACCESSED BY A
USER WHO IS PHYSICALLY LOCATED OUTSIDE OF NEW YORK.
§ 1547. ENFORCEMENT. 1. WHENEVER IT APPEARS TO THE ATTORNEY GENERAL,
EITHER UPON COMPLAINT OR OTHERWISE, THAT ANY PERSON, WITHIN OR OUTSIDE
THE STATE, HAS ENGAGED IN OR IS ABOUT TO ENGAGE IN ANY OF THE ACTS OR
PRACTICES STATED TO BE UNLAWFUL IN THIS ARTICLE, THE ATTORNEY GENERAL
MAY BRING AN ACTION OR SPECIAL PROCEEDING IN THE NAME AND ON BEHALF OF
THE PEOPLE OF THE STATE OF NEW YORK TO ENJOIN ANY VIOLATION OF THIS
ARTICLE, TO OBTAIN RESTITUTION OF ANY MONEYS OR PROPERTY OBTAINED
DIRECTLY OR INDIRECTLY BY ANY SUCH VIOLATION, TO OBTAIN DISGORGEMENT OF
ANY PROFITS OR GAINS OBTAINED DIRECTLY OR INDIRECTLY BY ANY SUCH
VIOLATION, INCLUDING BUT NOT LIMITED TO THE DESTRUCTION OF UNLAWFULLY
OBTAINED DATA, TO OBTAIN DAMAGES CAUSED DIRECTLY OR INDIRECTLY BY ANY
SUCH VIOLATION, TO OBTAIN CIVIL PENALTIES OF UP TO TEN THOUSAND DOLLARS
PER VIOLATION, AND TO OBTAIN ANY SUCH OTHER AND FURTHER RELIEF AS THE
COURT MAY DEEM PROPER, INCLUDING PRELIMINARY RELIEF.
2. NOTHING IN THIS ARTICLE SHALL BE CONSTRUED AS PROVIDING THE BASIS
FOR, OR BE SUBJECT TO, A PRIVATE RIGHT OF ACTION TO VIOLATIONS OF THIS
ARTICLE OR UNDER ANY OTHER LAW.
3. THE ATTORNEY GENERAL SHALL MAINTAIN A WEBSITE TO RECEIVE
COMPLAINTS, INFORMATION, OR REFERRALS FROM MEMBERS OF THE PUBLIC
CONCERNING A COVERED MANUFACTURER'S ALLEGED COMPLIANCE OR NONCOMPLIANCE
WITH THE PROVISIONS OF THIS ARTICLE.
§ 2. Subdivision 1 of section 899-ii of the general business law, as
added by chapter 121 of the laws of 2024, is amended to read as follows:
1. For the purposes of this article, an operator shall treat a user as
a covered user if the user's device communicates or signals that the
user is or shall be treated as a minor, including through a browser
plug-in or privacy setting, device setting, or other mechanism that
complies with regulations promulgated by the attorney general, INCLUDING
S. 8102--A 4
BUT NOT LIMITED TO THE DIGITAL SIGNALS CREATED IN ARTICLE FORTY-FIVE-B
OF THIS CHAPTER.
§ 3. If any clause, sentence, paragraph, subdivision, section or part
of this act shall be adjudged by any court of competent jurisdiction to
be invalid, such judgment shall not affect, impair, or invalidate the
remainder thereof, but shall be confined in its operation to the clause,
sentence, paragraph, subdivision, section or part thereof directly
involved in the controversy in which such judgment shall have been
rendered. It is hereby declared to be the intent of the legislature that
this act would have been enacted even if such invalid provisions had not
been included herein.
§ 4. This act shall take effect one year after it shall have become a
law. Effective immediately, the addition, amendment and/or repeal of any
rule or regulation necessary for the implementation of this act on its
effective date are authorized to be made and completed on or before such
effective date.