New York Child Data Protection Act
New York Child Data Protection Act in New York: active, effective June 20, 2025. Applies to Operators of online services collecting data from known minors or primarily directed to minors. Age range: Under 18. Consent required (minor if teen, parent if child)
Key facts
| Jurisdiction | New York |
|---|---|
| Category | Consumer Privacy |
| Status | active |
| Effective date | June 20, 2025 |
| Age range | Under 18 |
| Applies to | Operators of online services collecting data from known minors or primarily directed to minors |
Key requirements
- Consent required (minor if teen, parent if child)
- Only for permissible purposes
- Strict data processing limitations
Frequently asked
What does New York Child Data Protection Act require?
Consent required (minor if teen, parent if child) Only for permissible purposes Strict data processing limitations
Who must comply with New York Child Data Protection Act in New York?
Operators of online services collecting data from known minors or primarily directed to minors
When does New York Child Data Protection Act take effect and what is its status?
Effective June 20, 2025. Current status: active.
Related laws
| Law | Jurisdiction | Category | Status | Effective |
|---|---|---|---|---|
| Arkansas Children and Teens' Online Privacy Protection Act (HB 1717) | Arkansas | Consumer Privacy | active | July 1, 2026 |
| California Consumer Privacy Act (CCPA) | California | Consumer Privacy | active | September 2025 |
| California Mental Health Warnings (AB 56) | California | Consumer Privacy | pending | January 1, 2027 |
| Colorado Privacy Act (Minors Amendments) | Colorado | Consumer Privacy | active | October 1, 2025 |
| Connecticut Data Privacy Act (Children's Privacy Amendments) | Connecticut | Consumer Privacy | active | October 1, 2025; Phase 2 July 1, 2026 |
| Delaware Personal Data Privacy Act | Delaware | Consumer Privacy | active | January 1, 2025 |
| Indiana Consumer Data Protection Act | Indiana | Consumer Privacy | active | January 1, 2026 |
| Iowa Consumer Data Protection Act | Iowa | Consumer Privacy | active | January 1, 2025 |
Put it into practice
- Generate the policy: NIST AI RMF policy generator (generatepolicy.com)
- Buy the policy pack: NIST AI RMF Implementation Policy (cyberpolicy.shop)
- Build it yourself: Pillar 06 Companion — The 2026 AI Risk Register (ciso.diy)