New York · State Privacy Guide

New York Data Removal Guide (2026)

New York has no comprehensive consumer privacy law yet, but New Yorkers are protected by the SHIELD Act (breach notification and reasonable safeguards) and can leverage CCPA/GDPR rights against national and multinational data brokers — which most are.

At a glance

Comprehensive state privacy law
No (cross-state leverage applies)
Enforcement
New York Attorney General — Bureau of Consumer Frauds and Protection
Residents
19.5M (approx.)

New York Privacy Landscape

The NY SHIELD Act (2020) requires any business holding New Yorkers' private information to implement reasonable security safeguards and disclose breaches. It does not grant explicit deletion rights. The New York Privacy Act (NYPA) has been proposed multiple times but has not passed. In practice, New Yorkers successfully exercise deletion rights because most major data brokers (Whitepages, Spokeo, BeenVerified, etc.) honor CCPA-style requests uniformly to avoid maintaining separate workflows per state.

Your rights

  • SHIELD Act — reasonable security, breach disclosure
  • Deceptive practices remedies under NY GBL § 349 and § 350
  • De facto deletion leverage via brokers' CCPA/GDPR compliance
  • AG investigatory power over consumer-fraud complaints

Where your data leaks from in New York

Data brokers don\u2019t guess your address \u2014 they scrape specific public-record sources. The ones most relevant in New York:

  • ACRIS NYC property records
  • New York State Department of Motor Vehicles
  • NYS Unified Court System public case search
  • NYC311 business records

Ready to remove

Opt out of 200+ brokers for $2

OfflistMe drafts a legally compliant deletion email citing CCPA-equivalent protections for every broker. You send from your own inbox. No account, no ID upload.

Start for $2 \u2192

If a broker ignores your request

File a complaint with the New York Attorney General — Bureau of Consumer Frauds and Protection’s consumer protection division. Deceptive-practice statutes often provide remedies even without a state-specific privacy law.

File a complaint with New York Attorney General — Bureau of Consumer Frauds and Protection \u2197

FAQ: New York data removal

Do data brokers have to honor deletion requests from New Yorkers?+

Not by New York law. In practice, almost all major brokers honor deletion requests from any US resident because they already run CCPA-compliant workflows and rarely differentiate by state. You cite CCPA plus a general privacy request; most brokers respond.

What is the New York Privacy Act?+

Proposed legislation (S365 in 2025) that would grant New Yorkers access, deletion, and opt-out rights similar to California's CCPA. It has not passed as of April 2026. Until it does, NY residents leverage cross-state mechanisms.

Can I use the NY AG to force a data broker to delete my data?+

Indirectly, via GBL § 349 (deceptive practices) if a broker materially misrepresents its privacy practices, or via the SHIELD Act if there is a breach. The AG cannot directly enforce a deletion right that does not exist in NY law — yet.

Related resources

Other state guides