Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party cloud storage services that collect personal information in New York? What are the requirements?

Based on the documents provided, there are no specific requirements that prohibit the use of third-party cloud storage services that collect personal information in New York. However, entities that collect personal information are subject to the Personal Privacy Protection Law and must comply with its provisions.

Personal Privacy Protection Law

The Personal Privacy Protection Law requires that all requests for personal information be made in writing and reasonably describe the records and personal information sought [1.1]. Additionally, entities must provide access to the record or personal information, deny access in writing explaining the reasons therefor or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied within five business days of the receipt of a request [1.1].

Requests for Public Access to Records

Requests for public access to records must be made in writing and addressed to the Records Access Officer [3.1]. The records access officer shall respond promptly to a request for access to records and shall make the record available for inspection, permit or provide or certify copies of the records, or deny access to the record in whole or in part and explain in writing the reasons therefor [3.1].

Privacy and Confidentiality

Entities that collect personal information must comply with the Personal Privacy Protection Law and ensure that personal information is not disclosed to third parties except to the extent disclosure of personal information is required by a court order or a statute [6.1].

In summary, while there are no specific requirements that prohibit the use of third-party cloud storage services that collect personal information in New York, entities that collect personal information must comply with the Personal Privacy Protection Law and ensure that personal information is not disclosed to third parties except as required by law.

Source(s):
Jurisdiction

New York