What's happening
This bill restricts businesses from requiring or entering customers' personal information during credit or debit card transactions, with certain exceptions for fraud prevention and voluntary disclosure.
Why it matters
Expands consumer privacy protections. by clarifying that businesses cannot require customers to provide or enter personal information—such as addresses, zip codes, email addresses, or any phone numbers—during credit or debit card transactions, unless strictly necessary for the transaction or allowed by specific exceptions.
Addresses modern data collection methods. by explicitly adding “electronically entered” information to the list of restricted practices, recognizing that digital point-of-sale systems may collect data in ways not covered by older laws.
Allows limited exceptions for legitimate business needs. such as shipping, delivery, installation, special orders, mail-in transactions, or for the explicit purposes of fraud prevention, theft deterrence, identity verification, or contract enforcement—balancing consumer privacy with practical business requirements.
Permits voluntary information sharing. if customers are clearly informed how their data will be used, ensuring that consumers maintain control over their personal information and are not misled into disclosing sensitive data without consent.
Albany, before your first meeting.
Every bill that moved yesterday, summarized in a sentence and ranked by impact. The Albany Scorecard follows on Sundays.
Free. Unsubscribe in one click. Want alerts on specific bills? Create an account.
Who cares
Headline styles
Limit Cardholder Data Collection
Plain English, a few words. Used as the page title.
Sponsors
11 Co-sponsors
3 Multi-sponsors
History
- Enacting clause stricken
- Referred to consumer affairs and protection
Full text
2 pagesUnderlined is new[Struck] is removedOfficial text on nysenate.gov ↗
STATE OF NEW YORK
5243
2017-2018 Regular Sessions
IN ASSEMBLY
February 7, 2017
Introduced by M. of A. DINOWITZ, OTIS, STECK, COLTON, HOOPER, ARROYO, STIRPE, GALEF, JOYNER, JENNE, ROSENTHAL, SEAWRIGHT -- Multi-Sponsored by -- M. of A. COOK, PEOPLES-STOKES, PERRY -- read once and referred to the Committee on Consumer Affairs and Protection
AN ACT to amend the general business law, in relation to the personal information of a credit or debit card holder
The People of the State of New York, represented in Senate and Assembly, do enact as follows:
Section 1. Subdivision 3 of section 520-a of the general business law, as amended by chapter 233 of the laws of 2007, is amended to read as follows:
3. No person, firm, partnership or corporation which accepts credit or debit cards for the transaction of business shall require the credit or debit card holder to write or electronically enter on the credit or debit card transaction form, nor shall it write [or], cause to be written, or electronically entered on such form or on any attachment thereto, any personal identification information, including but not limited to the credit or debit card holder's address [or], zip code, email address or telephone [number] numbers, including home, cell and work telephone numbers, that is not required by the credit or debit card issuer to complete the credit or debit card transaction; provided, however, that the credit or debit card holder's address, zip code and telephone number may be required [on such form or attachment thereto] where (i) such information is necessary for shipping, delivery or installation of purchased merchandise or for special orders; [or] (ii) the person, firm, partnership or corporation processes credit or debit card transactions by mailing transaction forms to a designated bankcard center for settlement; or (iii) such information is used solely for the detection, investigation or prevention of fraud, theft, identity theft, criminal activity or enforcement of terms of sale. Nothing in this subdivision shall prevent a person, firm or corporation which accepts
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD03566-01-7
A. 5243 2
credit cards or debit cards from requesting that a customer voluntarily provide personal identification where the use of such information is disclosed to such consumer.
§ 2. This act shall take effect on the ninetieth day after it shall have become a law.
Reflowed for reading: line numbers and page breaks removed. Cite the official text.
Summaries, headlines and scores are AI-generated from the official bill text. How we score bills. Source: NYS Open Legislation.