AI Frontier Institute

Prohibits manufacturers or operators of networked camera devices to enable coordinated surveillance features on such devices as a default feature without first obtaining affirmative opt-in consent from the owner; requires disclosure of data rights for owners of such devices; prohibits coordinated surveillance features to be disclosed to law enforcement without a warrant; makes related provisions.

View primary source →

New York Assembly Bill A. 10687, the "consumer camera privacy act," is in committee (referred to Consumer Affairs and Protection on 2026-03-20) and has not been enacted. If enacted, it would add section 390-f to the general business law to regulate consumer internet-connected cameras such as video doorbells and security cameras. Manufacturers and operators could not turn on "coordinated surveillance features" by default. These are features that share footage or derived data with people other than the owner, such as networked search, crowdsourced tracking, biometric analysis and community alerts. Such features would need separate opt-in consent. They also could not use owner footage for algorithm training or product development without separate consent. Footage from devices without a paid subscription or affirmative owner setup could not be kept longer than 72 hours unless the owner elects longer retention. Basic functionality could not depend on joining a coordinated surveillance feature (subdivision 2). Sellers would have to prominently disclose storage, transmission, coordinated-feature defaults and retention at point of sale, and give a plain-language data summary at setup before recording is enabled (subdivision 3). Owners could get their footage within 72 hours, have footage and derivative data deleted within 30 days, and revoke consent within 24 hours (subdivision 4). Footage from coordinated surveillance features could go to law enforcement only with a probable-cause warrant or the owner's voluntary, informed consent to a specific request. Annual transparency reports on law enforcement requests would be required (subdivision 5). The attorney general could seek injunctions and civil penalties of up to $10,000 per violation, or $25,000 if willful. Injured persons could sue for actual damages or $500 per violation, whichever is greater, plus attorney's fees (subdivision 6). The act would take effect one year after becoming law (section 3).

← Back to the tracker