View full title
Enacts the "New York artificial intelligence consumer protection act", in relation to preventing the use of artificial intelligence algorithms to discriminate against protected classes.
In one paragraph
New York's A 768, the "New York artificial intelligence consumer protection act," would add General Business Law Article 45-A. Beginning January 1, 2027, developers and deployers of high-risk AI decision systems used in consequential decisions (education, employment, lending, government services, health care, housing, insurance, legal services) would have to use reasonable care against algorithmic discrimination, with documentation, impact assessments, consumer notices and appeal rights. Only the Attorney General would enforce it. Referred to Consumer Affairs and Protection January 7, 2026; it has not passed either chamber.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
None yet: the bill is pending. If enacted, AI developers and deployers doing business in New York would owe documentation, risk programs, impact assessments, notices and appeals for high-risk systems, enforced by the Attorney General.
Key provisions
- Developers of high-risk AI decision systems must provide deployers documentation and publish a statement of the system types they develop (from January 1, 2027)
- Deployers must keep a risk management program (NIST AI RMF, ISO/IEC 42001 or equivalent), complete impact assessments before deployment, annually and within 90 days of a substantial modification, and review systems annually
- Before a consequential decision, deployers must notify the consumer; for adverse decisions they must give principal reasons, a chance to correct data and an appeal with human review if technically feasible
- General-purpose model developers must keep technical documentation; persons offering consumer-facing AI must disclose that consumers are interacting with AI unless obvious
- Exemptions for certain federally approved systems, insurers and banks with equivalent regulation; rebuttable presumption of reasonable care for developers and deployers that comply and retain an AG-listed independent auditor
- Attorney General has exclusive enforcement; 60-day cure period through January 1, 2028; no private right of action; the text sets no penalty amounts
- Would take effect on the 270th day after becoming law
Latest legislative action
Jan 7, 2026. referred to consumer affairs and protection
Sponsors (showing 5 of 19)
| Name | Role |
|---|---|
| Alex Bores D | Primary |
| Linda Rosenthal D | Primary |
| RICHARDSON | Primary |
| ROSENTHAL L | Primary |
| ABINANTI | Cosponsor |
Topics and industries
Related topics
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error