WHAT THIS BILL REGULATES · 1 REQUIREMENT TYPE
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
(1) "Provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1)" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1)" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.
(2) "Generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of artificial intelligence models that are self-supervised and emulate the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2)" means a class of artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) models that are self-supervised and emulate the structure and characteristics of input data to generate derived synthetic contentSynthetic content"Synthetic content" means audio or visual content that has been generated or materially modified by a synthetic content creations system.Gen. Bus. Law § 1510(3), including, but not limited to, images, videos, audio, text, and other digital content.
(3) "Synthetic contentSynthetic content"Synthetic content" means audio or visual content that has been generated or materially modified by a synthetic content creations system.Gen. Bus. Law § 1510(3)" means audio or visual content that has been generated or materially modified by a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12).
(4) "State agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4)" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.
(5) "Synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5)" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.
(6) "Synthetic content creations system hosting platformSynthetic content creations system hosting platform"Synthetic content creations system hosting platform" means an online repository or other website that makes a synthetic content creations system available for use by a New York resident, regardless of whether the terms of such use include compensation. Synthetic content creations system hosting platform does not include cloud computing platforms or other services that make synthetic content creations systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6)" means an online repository or other website that makes a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) available for use by a New York resident, regardless of whether the terms of such use include compensation. Synthetic content creations system hosting platformSynthetic content creations system hosting platform"Synthetic content creations system hosting platform" means an online repository or other website that makes a synthetic content creations system available for use by a New York resident, regardless of whether the terms of such use include compensation. Synthetic content creations system hosting platform does not include cloud computing platforms or other services that make synthetic content creations systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6) does not include cloud computing platforms or other services that make synthetic content creations systemsSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) available for use by a New York state resident solely at the direction of others.
(7) "Social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7)" shall have the same meaning as in section eleven hundred of this chapter.
(8) "Covered operatorCovered operator"Covered operator" shall mean any person, business, or other legal entity, that operates or provides a social media platform.Gen. Bus. Law § 1510(8)" shall mean any person, business, or other legal entity, that operates or provides a social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7).
(9) "Covered userCovered user"Covered user" shall mean a user of a social media platform in the state, not acting as an operator, or agent or affiliate of the operator of such social media platform or any portion thereof.Gen. Bus. Law § 1510(9)" shall mean a user of a social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) in the state, not acting as an operator, or agent or affiliate of the operator of such social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) or any portion thereof.
(10) "Artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10)" or "artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.
(11) "AI modelAI model"AI model" means an information system or a component of an information system that implements artificial intelligence technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs.Gen. Bus. Law § 1510(11)" means an information system or a component of an information system that implements artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) technology and uses computational, statistical, or machine-learning techniques to produce outputs from a given set of inputs.
(12) "Synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12)" means a class of generative artificial intelligence systemGenerative artificial intelligence system"Generative artificial intelligence system" means a class of artificial intelligence models that are self-supervised and emulate the structure and characteristics of input data to generate derived synthetic content, including, but not limited to, images, videos, audio, text, and other digital content.Gen. Bus. Law § 1510(2) capable of generating wholly synthetic contentSynthetic content"Synthetic content" means audio or visual content that has been generated or materially modified by a synthetic content creations system.Gen. Bus. Law § 1510(3). "Synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12)" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.
Section 1510 establishes the defined terms for the Stop Deepfakes Act. The key definitions include synthetic content creations system (a generative AI system capable of producing wholly synthetic content, excluding simple editing tools like red-eye filters), synthetic content creations system provider (the developer or producer of such a system), synthetic content creations system hosting platform (an online repository making such systems available, excluding cloud computing platforms acting solely at the direction of others), and provenance data (data recording the origin or history of digital content, communicated as a content credential pursuant to the C2PA standard or equivalent, cryptographically bound to the underlying file). The provenance data definition expressly excludes personal information and unique device identifiers unless the user affirmatively opts to include them.
(1) 1 A synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) shall apply provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1), either directly or through the use of third-party technology, to synthetic contentSynthetic content"Synthetic content" means audio or visual content that has been generated or materially modified by a synthetic content creations system.Gen. Bus. Law § 1510(3) produced or modified by a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) that the synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) makes available.
(2)(a)–(e) 1 The application of provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) to synthetic contentSynthetic content"Synthetic content" means audio or visual content that has been generated or materially modified by a synthetic content creations system.Gen. Bus. Law § 1510(3), as required by this section, shall, at a minimum, identify the digital content as synthetic and communicate the following provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1): (a) that the content was created or edited using artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10); (b) the name of the synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5); (c) the time and date the provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) was applied; (d) the specific portions of the content that the synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) generated; and (e) the type of device, system, or service that was used to generate the image, audio, or video.
(3) 2 Synthetic content creations system hosting platformsSynthetic content creations system hosting platform"Synthetic content creations system hosting platform" means an online repository or other website that makes a synthetic content creations system available for use by a New York resident, regardless of whether the terms of such use include compensation. Synthetic content creations system hosting platform does not include cloud computing platforms or other services that make synthetic content creations systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6) shall not make available a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) where the hosting platform knows that the synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) for such system does not apply provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) to content created or substantially modified by the artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10) system in a manner consistent with specifications set forth in this section, nor shall a synthetic content creations system hosting platformSynthetic content creations system hosting platform"Synthetic content creations system hosting platform" means an online repository or other website that makes a synthetic content creations system available for use by a New York resident, regardless of whether the terms of such use include compensation. Synthetic content creations system hosting platform does not include cloud computing platforms or other services that make synthetic content creations systems available for use by a New York state resident solely at the direction of others.Gen. Bus. Law § 1510(6) deliberately prevent a synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) from applying provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) to content created or substantially modified by a synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) in a manner consistent with the specifications set forth above.
(4) The provisions of this section shall only apply to synthetic content creations systemsSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) that were created or modified after the effective date of this article.
Section 1511 imposes the bill's core provenance data requirements. Synthetic content creations system providers must embed provenance data — either directly or through third-party technology — in all synthetic content their systems produce or modify. The required provenance metadata must identify the content as synthetic, state that AI was used, name the provider, include a timestamp, identify which portions of the content were AI-generated, and identify the device, system, or service used. Hosting platforms face a complementary obligation: they may not make available a system whose provider does not apply compliant provenance data, and they may not deliberately prevent a provider from applying such data.
Subdivision 4 limits the section's scope to synthetic content creations systems created or modified after the effective date, providing a safe harbor for pre-existing systems that are not subsequently updated.
3 A social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) shall not delete, disassociate, or degrade, in whole or in part, provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) from or associated with content uploaded to the social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) by a covered userCovered user"Covered user" shall mean a user of a social media platform in the state, not acting as an operator, or agent or affiliate of the operator of such social media platform or any portion thereof.Gen. Bus. Law § 1510(9), unless and until the content is permanently deleted or removed from the social media platformSocial media platform"Social media platform" shall have the same meaning as in section eleven hundred of this chapter.Gen. Bus. Law § 1510(7) or the deletion, disassociation, or degradation of such content is required by law. Nothing in this article shall be construed as banning users from choosing to include personal information in provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) from or associated with such uploaded content.
Section 1512 imposes a provenance preservation obligation on social media platforms. Covered operators must not delete, disassociate, or degrade provenance data attached to content uploaded by covered users, unless the content itself is permanently deleted or removal is required by law. This is a passive preservation duty — the platform need not affirmatively add provenance data, but must not strip or degrade it once present. The savings clause clarifies that the article does not prohibit users from voluntarily including personal information in provenance data associated with their uploaded content.
(1) 4 A state agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4) shall ensure, to the extent practicable either through direct application or through the use of third-party technology, that all audio, images and videos published or distributed electronically by the state agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4) carry provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1).
(2)(a)–(e) 4 The application of provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) to audio, images and videos, as required by this article, shall, at a minimum, communicate the following provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1): (a) The type of device, system, or service that was used to generate the audio, image or video, to the extent the device, system, or service has the technical capability to do so; (b) The specific portions of the content that the synthetic content creations systemSynthetic content creations system"Synthetic content creations system" means a class of generative artificial intelligence system capable of generating wholly synthetic content. "Synthetic content creations system" shall not include technologies such as red-eye filters or other technologies that are only capable of making changes to existing audio or visual content.Gen. Bus. Law § 1510(12) used by the state agencyState agency"State agency" shall have the same meaning as defined in subdivision six of section two hundred two of the state technology law.Gen. Bus. Law § 1510(4) generated, if any; (c) Whether the content was created or edited using artificial intelligenceArtificial intelligence"Artificial intelligence" or "artificial intelligence technology" means a machine-based system that can, for a given set of human-defined objectives, make predictions, recommendations, or decisions influencing real or virtual environments, and that uses machine- and human-based inputs to perceive real and virtual environments, abstract such perceptions into models through analysis in an automated manner, and use model inference to formulate options for information or action.Gen. Bus. Law § 1510(10); (d) The name of the synthetic content creations system providerSynthetic content creations system provider"Synthetic content creations system provider" means an organization or individual that creates, codes, substantially modifies, or otherwise produces a synthetic content creations system that is made publicly available for use by a New York resident, regardless of whether the terms of such use include compensation.Gen. Bus. Law § 1510(5) used to generate the synthetic contentSynthetic content"Synthetic content" means audio or visual content that has been generated or materially modified by a synthetic content creations system.Gen. Bus. Law § 1510(3), if any; and (e) The time and date any of the provenance dataProvenance data"Provenance data" means data that records the origin or history of digital content and is communicated as a content credential pursuant to the Technical Specification for Content Credentials published by the Coalition for Content Provenance and Authenticity, or relevant standards, guidelines or specifications published after the effective date of this article by an established standards setting body, which at a minimum includes: (a) information about the origin or creation of the content; (b) subsequent editing or modification to the content or its metadata; and (c) use of a synthetic content creations system in generating or modifying the content. Such information shall be cryptographically bound to the underlying file and use signing credentials. "Provenance data" shall not include personal information as defined in subdivision five of section two hundred two of the state technology law, or unique device, system, or service information that is reasonably capable of being associated with a particular user, including but not limited to an internet protocol address, unless a user chooses to include such personal information in such data described in paragraph (a), (b), or (c) of this subdivision.Gen. Bus. Law § 1510(1) delineated in this section was applied.
Section 1513 requires New York state agencies to attach provenance data to all audio, images, and videos they publish or distribute electronically, to the extent practicable. This applies to all such media — not only AI-generated content — creating a broader provenance obligation for government communications. The required metadata elements parallel those in § 1511 but are adapted for the government context: device/system/service type (subject to technical capability), AI-generated portions if any, whether AI was used, the provider name if AI was used, and a timestamp. The 'to the extent practicable' qualifier provides flexibility for agencies with legacy systems or limited technical capacity.
5 In addition to the other remedies provided, whenever there shall be a violation of this article, application may be made by the attorney general in the name of the people of the state of New York to a court or justice having jurisdiction by a special proceeding to issue an injunction, and upon notice to the defendant of not less than five days, to enjoin and restrain the continuance of such violations; and if it shall appear to the satisfaction of the court or justice that the defendant has, in fact, violated this article, an injunction may be issued by such court or justice, enjoining and restraining any further violation, without requiring proof that any person has, in fact, been injured or damaged thereby. In any such proceeding, the court may make allowances to the attorney general as provided in paragraph six of subdivision (a) of section eighty-three hundred three of the civil practice law and rules. Whenever the court shall determine that a violation of this article has occurred, the court may impose a civil penalty of not more than twenty-five thousand dollars for each violation.
Section 1514 establishes the enforcement mechanism for the Stop Deepfakes Act. The Attorney General may bring a special proceeding for injunctive relief without requiring proof that any person was actually injured or damaged. The court may impose a civil penalty of up to $25,000 per violation. There is no private right of action. The court may make allowances to the Attorney General under CPLR § 8303(a)(6).