WHAT THIS BILL REGULATES · 1 REQUIREMENT TYPE
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
(1) "Provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1)" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) in generating or modifying the content. "Provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1)" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.
(2) "Generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2)" means a class of AI modelAI model"AI model" means an information system or a component of an information system that implements artificial intelligence technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs.Gen. Bus. Law § 1510(11) that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic contentSynthetic content"Synthetic content" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence system.Gen. Bus. Law § 1510(3), including, but not limited to, images, videos, audio, text, and other digital content.
(3) "Synthetic contentSynthetic content"Synthetic content" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence system.Gen. Bus. Law § 1510(3)" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2).
(4) "State agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4)" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.
(5) "Generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5)" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.
(6) "Generative artificial intelligence hosting platformGenerative artificial intelligence hosting platform"Generative artificial intelligence hosting platform" means an online repository or other website that makes a generative artificial intelligence system available for use by a New York resident, regardless of whether the terms of such use include compensation. Generative artificial intelligence hosting platform does not include cloud computing platforms or other services that make generative artificial intelligence systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6)" means an online repository or other website that makes a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) available for use by a New York resident, regardless of whether the terms of such use include compensation. Generative artificial intelligence hosting platformGenerative artificial intelligence hosting platform"Generative artificial intelligence hosting platform" means an online repository or other website that makes a generative artificial intelligence system available for use by a New York resident, regardless of whether the terms of such use include compensation. Generative artificial intelligence hosting platform does not include cloud computing platforms or other services that make generative artificial intelligence systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6) does not include cloud computing platforms or other services that make generative artificial intelligence systemsGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) available for use by a New York state resident solely at the direction of others.
(7) "Social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7)" shall have the same meaning as in section eleven hundred of this chapter.
(8) "Covered operatorCovered operator"Covered operator" shall mean any person, business, or other legal entity, that operates or provides a social media platform.Gen. Bus. Law § 1510(8)" shall mean any person, business, or other legal entity, that operates or provides a social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7).
(9) "Covered userCovered user"Covered user" shall mean a user of a social media platform in the state, not acting as an operator, or agent or affiliate of the operator of such social media platform or any portion thereof.Gen. Bus. Law § 1510(9)" shall mean a user of a social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) in the state, not acting as an operator, or agent or affiliate of the operator of such social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) or any portion thereof.
(10) "Artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10)" or "artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.
(11) "AI modelAI model"AI model" means an information system or a component of an information system that implements artificial intelligence technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs.Gen. Bus. Law § 1510(11)" means an information system or a component of an information system that implements artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs.
Section 1510 establishes the defined terms used throughout the Stop Deepfakes Act. The key definitions are provenance data, which is expressly tied to the C2PA Content Credentials specification; generative artificial intelligence system; synthetic content (limited to audio, images, and videos — notably excluding text); and three covered entity types: generative artificial intelligence provider (the developer), generative artificial intelligence hosting platform (the distributor, excluding pure cloud-computing services), and covered operator (social media platforms). The provenance data definition includes a carve-out excluding personal information and unique device or user identifiers.
(1) 1 A generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) shall apply provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1), either directly or through the use of third-party technology, to synthetic contentSynthetic content"Synthetic content" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence system.Gen. Bus. Law § 1510(3) produced or modified by a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) that the generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) makes available.
(2)(a)–(f) 1 The application of provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) to synthetic contentSynthetic content"Synthetic content" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence system.Gen. Bus. Law § 1510(3), as required by this section, shall, at a minimum, identify the digital content as synthetic and communicate the following provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1): (a) that the content was created or edited using artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10); (b) the name of the generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5); (c) the time and date the provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) was applied; (d) the specific portions of the content that are synthetic; (e) the type of device, system, or service that was used to generate the image, audio, or video, to the extent that the device, system, or service has the technical capability to generate; and (f) any other additional provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) specified in regulations promulgated pursuant to this article by the attorney general.
(3) 2 Generative artificial intelligence hosting platformsGenerative artificial intelligence hosting platform"Generative artificial intelligence hosting platform" means an online repository or other website that makes a generative artificial intelligence system available for use by a New York resident, regardless of whether the terms of such use include compensation. Generative artificial intelligence hosting platform does not include cloud computing platforms or other services that make generative artificial intelligence systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6) shall not make available a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) where the hosting platform knows that the generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) for the generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) does not apply provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) to content created or substantially modified by the artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) system in a manner consistent with specifications set forth above, nor shall a generative artificial intelligence hosting platformGenerative artificial intelligence hosting platform"Generative artificial intelligence hosting platform" means an online repository or other website that makes a generative artificial intelligence system available for use by a New York resident, regardless of whether the terms of such use include compensation. Generative artificial intelligence hosting platform does not include cloud computing platforms or other services that make generative artificial intelligence systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6) deliberately prevent a generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) from applying provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) to content created or substantially modified by a generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) in a manner consistent with the specifications set forth above.
(4) The provisions of this section shall only apply to generative artificial intelligence systemsGenerative artificial intelligence system"Generative artificial intelligence system" means a class of AI model that is self-supervised and emulates the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) that were created or modified after the effective date of this article.
Section 1511 imposes the bill's core provenance-embedding obligations. Generative AI providers must apply C2PA-compliant provenance data to all synthetic content (audio, images, and video) produced or modified by their systems. The provenance data must include at minimum six enumerated data fields: an AI-creation disclosure, the provider's name, a timestamp, identification of synthetic portions, the device or system used, and any additional fields the Attorney General may specify by regulation.
Hosting platforms face a dual prohibition: they may not make available a GenAI system whose provider they know does not apply provenance data, and they may not deliberately prevent a provider from applying provenance data. Subdivision 4 limits the entire section to systems created or modified after the act's effective date — a grandfathering clause for pre-existing systems.
3 A social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) shall not delete, disassociate, or degrade, in whole or in part, provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) from or associated with content uploaded to the social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) by a covered userCovered user"Covered user" shall mean a user of a social media platform in the state, not acting as an operator, or agent or affiliate of the operator of such social media platform or any portion thereof.Gen. Bus. Law § 1510(9), unless and until the content is permanently deleted or removed from the social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) or the deletion, disassociation, or degradation of such content is required by law.
Section 1512 imposes a provenance-preservation obligation on social media platforms. Covered operators must not delete, disassociate, or degrade provenance data from content uploaded by covered users. The preservation duty runs for as long as the content remains on the platform. Two exceptions apply: permanent deletion or removal of the content itself, and deletion required by law.
(1) 4 A state agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4) shall ensure, to the extent practicable either through direct application or through the use of third-party technology, that all audio, images and videos published or distributed electronically by the state agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4) carry provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1).
(2)(a)–(f) 4 The application of provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) to audio, images and videos, as required by this article, shall, at a minimum, communicate the following provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1): (a) The type of device, system, or service that was used to generate the audio, image or video, to the extent the device, system, or service has the technical capability to generate provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) at the time the audio, image or video was generated; (b) The specific portions of the audio, image or video that are synthetic contentSynthetic content"Synthetic content" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence system.Gen. Bus. Law § 1510(3), if any; (c) Whether the content was created or edited using artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10); (d) The name of the generative artificial intelligence providerGenerative artificial intelligence provider"Generative artificial intelligence provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a generative artificial intelligence system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) used to generate the synthetic contentSynthetic content"Synthetic content" means audio, images or videos that have been produced or significantly modified by a generative artificial intelligence system.Gen. Bus. Law § 1510(3), if any; (e) The time and date any of the provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) delineated in this section was applied; and (f) Any other additional provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, and which discloses: (a) information about the origin or creation of the content; (b) any subsequent editing or modification to the content or its metadata; and (c) any use of generative artificial intelligence in generating or modifying the content. "Provenance data" does not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address.Gen. Bus. Law § 1510(1) specified in regulations promulgated pursuant to this article.
Section 1513 requires New York state agencies to apply provenance data to all audio, images, and videos they publish or distribute electronically, to the extent practicable. The provenance data must include six enumerated fields similar to — but not identical to — those required for GenAI providers in § 1511. The practicability qualifier and the 'direct application or through third-party technology' language give agencies flexibility in implementation.
5 In addition to the other remedies provided, whenever there shall be a violation of this article, application may be made by the attorney general in the name of the people of the state of New York to a court or justice having jurisdiction by a special proceeding to issue an injunction, and upon notice to the defendant of not less than five days, to enjoin and restrain the continuance of such violations; and if it shall appear to the satisfaction of the court or justice that the defendant has, in fact, violated this article, an injunction may be issued by such court or justice, enjoining and restraining any further violation, without requiring proof that any person has, in fact, been injured or damaged thereby. In any such proceeding, the court may make allowances to the attorney general as provided in paragraph six of subdivision (a) of section eighty-three hundred three of the civil practice law and rules. Whenever the court shall determine that a violation of this article has occurred, the court may impose a civil penalty of not more than twenty-five thousand dollars for each violation.
Section 1514 vests enforcement authority exclusively in the Attorney General, who may bring a special proceeding for injunctive relief without proving actual injury. Courts may impose civil penalties of up to $25,000 per violation and may award litigation costs to the Attorney General under CPLR § 8303(a)(6). No private right of action is created.
This act shall take effect on the one hundred eightieth day after it shall have become a law and shall expire and be deemed repealed December 31, 2030. Effective immediately, the addition, amendment and/or repeal of any rule or regulation necessary for the implementation of this act on its effective date are authorized to be made and completed on or before such effective date.
The act takes effect 180 days after becoming law and sunsets on December 31, 2030. The Attorney General is authorized to begin promulgating implementing regulations immediately upon enactment, before the 180-day effective date.