NY S01169: Regulates the development and use of certain artificial intelligence systems to prevent algorithmic discrimination; requires independent audits of hi…

In one paragraph

New York's S 1169-B would regulate high-risk AI systems used in consequential decisions on employment, education, housing, health, finance and legal services. Developers and deployers would have to take reasonable care against algorithmic discrimination, commission independent audits, file reports and keep a risk management program; social scoring AI would be banned. The Senate passed it June 3, 2026 and delivered it to the Assembly; it has not passed the Assembly.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

If enacted, companies that develop or use high-risk AI in hiring, lending, housing, health, education or legal decisions would need audits, reports, human review and appeal processes.

Key provisions

1. 1It would be an unlawful discriminatory practice, also added to Executive Law section 296, for a developer or deployer to fail to take reasonable care to prevent foreseeable algorithmic discrimination from a high-risk AI system (Section 106)
2. 2Covered deployers would have to tell people when a high-risk AI system is used, explain how to appeal, answer appeals within 45 days (extendable once by 45 days), and conduct meaningful human review of each consequential decision (Section 108)
3. 3Covered developers would need independent third-party audits (first within six months, then annually; satisfactory ISO 42001 audits count) and covered deployers audits first within six months, a second one year later, then every two years (Section 110)
4. 4Developers and deployers would have to file reports and their latest audit with the Department of Financial Services, and keep a risk management policy and program (Sections 111 and 112)
5. 5AI systems that score people's trustworthiness from social behavior or personal characteristics, with the listed harmful results, would be prohibited (Section 113)
6. 6The attorney general could seek injunctions and civil penalties of up to $25,000 per violation by a developer and $10,000 per violation by a deployer; state and local governments and public universities are excluded (Sections 107 and 114)
7. 7Would take effect one year after becoming law; the audit section would take effect two years after

Latest legislative action

Jun 3, 2026. DELIVERED TO ASSEMBLY

Sponsors (showing 5 of 19)

Roll call votes