Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I collect browser information from participants in New York? What are the requirements?

Based on the provided context documents, collecting browser information from participants in New York is subject to certain requirements.

Requirements for Collecting Browser Information

To collect browser information from participants in New York, you must comply with the following requirements:

  1. Comply with the Personal Privacy Protection Law: As per the Personal Privacy Protection Law, electronic records shall be considered and treated in the same manner as any other record. Except to the extent disclosure of personal information is required by a court order or a statute, or if the information is used solely for statistical purposes in aggregate form, no person acting as a certification authority shall disclose to a third party any personal information reported to the certification authority by the electronic signatory other than the information necessary to issue or authenticate the certificate. Information reported to a certification authority for purposes other than issuing a certificate shall not be subject to this subdivision. [2.3]([2.3])
  2. Collect only relevant and necessary personal information: The New York State Council on the Arts maintains in its records only such personal information that is relevant and necessary to accomplish a purpose of the council that is required to be accomplished by statute or executive order, or to implement a program specifically authorized by law. Personal information will be collected, whenever practicable, directly from the person to whom the information pertains. [1.2]([1.2])
  3. Ensure the security of personal information: An applicant must demonstrate that the internet pre-licensing course can validate student identity at registration and throughout the course, participation throughout the course, that the time requirements of the course are met, and that the student successfully completed the course. The course must meet all of the technical specifications prescribed by the commissioner. Applicants must provide information on when validation will occur and what validation methods they propose to use. [3.1]([3.1])
  4. Respond to requests for records and information: Requests for records and information must be made in writing and must be accompanied by a reasonable proof of identity. A request shall reasonably describe the record to which access is sought or about which information is desired. Within five business days of the receipt of a proper request, the Office of Information Technology Services shall provide access to the record, deny access in writing explaining the reasons therefore, or acknowledge the receipt of a request in writing, stating the approximate date when the request will be granted or denied, that date shall not exceed 30 days from the date of acknowledgment. [2.1]([2.1])

Based on the above requirements, collecting browser information from participants in New York is subject to strict regulations. Therefore, it is recommended to consult with a legal expert before collecting any personal information from participants in New York.

Source(s):
Jurisdiction

New York