In one paragraph
Passed both houses; awaiting delivery to the Governor. S 6954-B, the Stop Deepfakes Act, would require providers of publicly available generative AI systems to attach provenance data (content credentials such as the C2PA standard) to AI-generated or AI-modified images, audio and video, identifying it as synthetic, the provider and when it was made. Hosting platforms could not knowingly offer systems that don't. Large online platforms would have to keep provenance data and show it to users, and state agencies would label their own media. The Attorney General could seek injunctions and fines up to $25,000 per violation. Effective 180 days after signing.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
Nothing yet. If signed, generative AI providers serving New Yorkers must embed provenance data in AI images, audio and video, and large platforms must keep and display it.
Key provisions
- Would add General Business Law Article 45-C (§§ 1550-1554), the Stop Deepfakes Act
- Providers of synthetic content creation systems made publicly available to New Yorkers must apply provenance data to content they generate or substantially modify: that AI was used, the provider's name, the time and date, the AI-generated portions where feasible, and the device or service used; minor editing aids are exempt
- Provenance data follows the C2PA content-credential specification or a comparable standard, is cryptographically bound where possible, and excludes personal information unless the user adds it
- Hosting platforms may not knowingly offer systems that skip provenance data, or block providers from applying it
- Large online platforms (social media, file sharing, mass messaging, search) may not strip provenance data and must surface it clearly to users; closed, invitation-only workspaces are exempt from the display duty
- State agencies must, where practicable, attach provenance data to audio, images and video they publish
- Attorney General enforcement: injunctions and civil penalties up to $25,000 per violation; applies only to systems created or modified after the effective date
- Passed the Senate June 3 and the Assembly June 4, 2026 (substituted for A 6540-E); would take effect 180 days after becoming law
Latest legislative action
Jun 4, 2026. Returned to Senate (passed Assembly, substituted for A6540E); not yet delivered to the Governor
Sponsors
| Name | Role |
|---|---|
| Andrew Gounardes | Primary |
| Patricia Fahy | Cosponsor |
Topics and industries
Related topics
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error