Rules on AI that rates, disciplines or tracks workers, and on cameras and face or emotion recognition.
No rule in our checker covers this in New York State. That does not mean you have no rights: general laws on data protection and discrimination may still apply.
When AI decides about a loan, a flat, insurance or care
1 rule
Rules for automated decisions about customers, and for prices set by algorithms.
Rules that make employers report or explain job cuts linked to AI.
No rule in our checker covers this in New York State. That does not mean you have no rights: general laws on data protection and discrimination may still apply.
At school and university
1 rule
Rules for AI used by schools, teachers and students.
Spell out digital replica terms in performer contracts
A contract clause can let you use a digital replica of a person’s voice or likeness instead of work they would have done in person. Such a clause is void if it does not describe the intended uses reasonably specifically, unless the person had a lawyer or a union contract covering such replicas.
Who must do it
Any business contracting with a person for personal or professional services in New York, such as actors, voice artists and creators. It applies to contracts made or changed from January 1, 2025.
The law
General Obligations Law section 5-302
Who enforces it
No regulator or fine; such a clause cannot be enforced.
Label prices set by an algorithm using personal data
If an algorithm uses a customer’s personal data to set the price you offer them, show this notice clearly next to the price: “THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA”.
Who must do it
Businesses offering personalised algorithmic prices to New York consumers. Insurers, financial institutions under the federal Gramm-Leach-Bliley Act, and lower prices for existing subscriptions are excluded.
The law
Algorithmic Pricing Disclosure Act, General Business Law section 349-a (Chapter 58 of 2025, Part X)
Who enforces it
Attorney General, enforcing since November 10, 2025: a cease-and-desist letter first, then court fines of up to $1,000 per violation. A federal court upheld the law in October 2025, and an appeal is pending.
Get consent before calling people with an AI voice
Calls that use AI-generated or cloned voices count as artificial-voice calls under the federal robocall law, so they need the called person’s prior express consent, unless it is an emergency or an exemption applies. The message must also identify the caller.
It applies in New York State because New York State is part of the United States.
New York StateIn force
Add crisis help and “not human” notices to AI companions
If your chatbot acts as an ongoing AI companion, it must detect signs of suicidal thoughts or self-harm and refer users to crisis services such as the 988 line. It must also tell users clearly that they are not talking to a human, at the start of a conversation and at least every three hours while it continues.
Who must do it
Businesses that offer AI companions to people in New York for personal use: AI that remembers past chats, asks unprompted emotional questions and keeps up personal conversations. Customer-service, productivity and research tools are excluded.
The law
General Business Law, article 47 (sections 1700 to 1704), added by Chapter 58 of 2025, Part U
Who enforces it
Attorney General; civil penalties of up to $15,000 a day, paid into a suicide prevention fund.
Do not post or buy fake reviews, including AI-written ones
Do not write, create, sell or buy reviews or testimonials that falsely suggest the reviewer exists, used the product or had the experience described. The FTC says this covers AI-generated fake reviews.
Who must do it
Businesses selling to US consumers.
The law
FTC Rule on the Use of Consumer Reviews and Testimonials, 16 CFR part 465
Who enforces it
Federal Trade Commission; civil penalties of up to $53,088 per knowing violation.
It applies in New York State because New York State is part of the United States.
United States (all states)In force
Never post AI-made intimate images of real people
It is a federal crime to knowingly publish online an intimate image of an identifiable real person without their consent, including realistic fakes made with AI.
Who must do it
Anyone, people and businesses alike.
The law
TAKE IT DOWN Act (Public Law 119-12), section 2, 47 U.S.C. 223(h)
Who enforces it
Department of Justice; fines and up to two years in prison, or three years if the person shown is a minor.
It applies in New York State because New York State is part of the United States.
New York StateIn force
Get consent before using a dead performer’s AI replica
Before you use a digital replica, a realistic computer-made voice or likeness, of a deceased performer in an audiovisual work, a sound recording or a live musical performance, get consent from whoever holds their publicity rights, usually the heirs. A disclaimer is no longer enough.
Who must do it
Anyone using a replica of a performer who lived in New York when they died, on or after May 29, 2021, such as studios, labels, advertisers and AI companies.
The law
Civil Rights Law section 50-f, as amended by Chapter 616 of 2025
Who enforces it
No regulator; the rights holders can sue for $2,000 or their damages, whichever is greater, plus the profits made from the use.
Remove reported intimate deepfakes within 48 hours
Give people a clear, plain-language way to report intimate images of themselves posted without consent, including AI-made fakes. Remove a valid reported image within 48 hours, and make reasonable efforts to remove known identical copies.
Who must do it
Public websites, apps and online services that mainly host content from users, with no size threshold. Broadband providers and email are excluded.
The law
TAKE IT DOWN Act (Public Law 119-12), section 3
Who enforces it
Federal Trade Commission; civil penalties of up to $53,088 per violation. Removals made in good faith are protected.
It applies in New York State because New York State is part of the United States.
New York StateIn force
Disclose AI-generated performers in your ads
If you make an ad and know it includes a synthetic performer, a realistic human made with AI or other software who is not a real, recognisable person, say so clearly in the ad.
Who must do it
Anyone who produces or creates commercial ads. Audio-only ads, ads for films, TV shows and video games, and AI used only to translate a real performer’s speech are excluded; outlets that only publish ads are exempt.
The law
General Business Law section 396-b, as amended by Chapter 617 of 2025
Who enforces it
$1,000 for a first violation and $5,000 for each later one; the law does not name the enforcer.
Get parents’ separate consent to train AI on kids’ data
If your site, app or service is aimed at children under 13, or you know you collect their data, get a parent’s separate, verifiable consent before disclosing a child’s personal information to third parties. The FTC says disclosing it to train or develop AI needs this consent.
Who must do it
Operators of websites, apps and online services, including education technology, aimed at children under 13 or knowingly collecting their data.
The law
Children’s Online Privacy Protection Rule, 16 CFR 312.5(a)(2), as amended in 2025
Who enforces it
Federal Trade Commission and state attorneys general; civil penalties of up to $53,088 per violation.