NY, US · AI law tracker
S2539 — NY, US
S2539 is an AI governance legislation from NY, currently introduced. New York S2539 introduces a requirement for retailers to display warning signs when collecting biometric data [1]. AIGI tracks 3 primary-source updates on this bill; the most recent was published on 2025-01-21.
Status & timeline
- Regulatory stage
- introduced
- Bill status
- Senate Floor Calendar
- Authority / governing body
- New York State Senate
- Chamber
- Senate
- Document type
- legislation
Next deadline: No fixed deadline — effective upon enactment.
Subscriber only
Full obligation matrix
| Actor | Obligation | Deadline | Source |
|---|---|---|---|
| deployer | Retailers must post warning signs notifying customers of the tracking and collecting of their biometric data through electronic devices. | Upon enactment, likely 90-180 days after becoming law. | — |
Subscriber only
Enforcement risk score
Announced regulation; enforcement footprint still forming.
Subscriber only
Role-based compliance checklist
- compliance_officer Monitor the legislative progress of NY S2539.
- general_counsel Assess current biometric data collection practices within retail operations and identify all electronic devices involved.
- compliance_officer Draft warning signs that clearly communicate biometric data collection practices, in anticipation of the bill becoming law.
- compliance_officer Plan for the implementation and conspicuous posting of warning signs in all relevant retail locations should the bill be enacted.
Subscriber only
Vendor impact assessment
- Vendor risk class
- high
- Procurement categories
- security_tooling, customer_service_ai, other
Retailers must ensure that any third-party electronic devices or software used for biometric data collection are compliant with disclosure requirements, placing an onus on vendors to provide features or assurances.
Sample vendor questions
- Does your solution collect, store, or process any biometric data from customers?
- What mechanisms are in place to ensure compliance with biometric data disclosure requirements?
- How does your system alert customers to biometric data collection?
- What data retention and deletion policies are in place for biometric data?
- Can your system be configured to disable biometric data collection if required?
Intelligence briefs (3)
NY Senate Bill S2539 Mandates Biometric Data Warning Signs for Retailers
New York S2539 introduces a requirement for retailers to display warning signs when collecting biometric data [1].
This development bears on deployer obligations for AI systems using biometric identification, signaling increased state-level scrutiny and disclosure requirements.
Deadline: No fixed deadline — effective upon enactment.
Primary source →NY Bill Mandates Biometric Data Collection Warning Signs in Retail
A New York Senate bill proposes requiring retailers to post warning signs when collecting customer biometric data [1].
This development signals increasing state-level focus on consumer biometric data privacy and disclosure obligations for deployers.
Deadline: No fixed deadline — the bill is currently on the Senate Floor Calendar.
Primary source →NY Senate Bill S2539 Passed: Retailers Must Post Biometric Data Collection Warnings
New York State's S2539 mandates retailers to post warning signs for biometric data collection, with civil penalties [1].
This development signals expanding state-level obligations for AI-enabled biometric identification systems in commercial settings.
Deadline: No fixed deadline — effective upon enactment into law
Primary source →Frequently asked questions
- What is S2539?
- New York Senate Bill S2539, currently on the Senate Floor Calendar, proposes that retailers must conspicuously post warning signs if they track or collect customers' biometric data using electronic devices [1]. The legislation also stipulates civil penalties for non-compliance, aiming to enhance transparency regarding biometric data practices in retail environments [2]. This initiative reflects a broader regulatory interest in consumer privacy concerning advanced identification technologies. Primary source →
- Why does S2539 matter?
- This development bears on deployer obligations for AI systems using biometric identification, signaling increased state-level scrutiny and disclosure requirements. Primary source →
- Who does S2539 affect?
- Organizations operating retail establishments in New York State that employ electronic devices for tracking or collecting customer biometric data are within scope. This includes technologies such as facial recognition, fingerprint scanners, or voice recognition used for identification, security, or personalized services. Business functions related to customer experience, security, and legal compliance would need to assess existing practices. Primary source →
- What are the key dates for S2539?
- No fixed deadline — effective upon enactment. Primary source →
- What is the current status of S2539?
- As of the last published update, S2539 is at the "introduced" stage, with bill status "Senate Floor Calendar". Primary source →
- Where can I find the primary source for S2539?
- The primary source for the most recent update is at https://legislation.nysenate.gov/bills/2025/S2539. AIGI publishes the full citation chain plus every approved brief on this bill. Primary source →
Related
Stay informed