N.Y.
State Technology Law Section 504
Submission to the governor and legislature
1.
Each impact assessment conducted pursuant to this article shall be submitted to the governor, the temporary president of the senate, and the speaker of the assembly at least thirty days prior to the implementation of the automated decision-making tool that is the subject of such assessment.2.
(a) The impact assessment of an automated decision-making tool shall be published on the website of the relevant government agency.(b)
If the government agency makes a determination that the disclosure of any information required in the impact assessment would result in a substantial negative impact on health or safety of the public, infringe upon the privacy rights of individuals, or significantly impair the government agency’s ability to protect its information technology or operational assets, such government agency may redact such information, provided that an explanatory statement on the process by which the government agency made such determination is published along with the redacted impact assessment.(c)
If the impact assessment covers any automated decision-making tool that includes technology that is used to prevent, detect, protect against or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities or other illegal activity, preserve the integrity or security of tools, or to investigate, report or prosecute those responsible for any such malicious or deceptive action, such government agency may redact such information for the purposes of this subdivision, provided that an explanatory statement on the process by which the government agency made such determination is published along with the redacted impact assessment. * NB Effective December 12, 2026
Source:
Section 504 — Submission to the governor and legislature, https://www.nysenate.gov/legislation/laws/STT/504 (updated Dec. 26, 2025; accessed Jan. 3, 2026).
