{"data":{"id":"us-ny/n.y.-state-technology-law-206","jurisdiction":"us-ny","citation":"N.Y. State Technology Law § 206","heading":"Exceptions","body":"§ 206. Exceptions. Notwithstanding section two hundred four of this\narticle, a state agency may collect or disclose personal information if\nthe collection or disclosure is:\n  1. necessary to perform the statutory duties of the state agency that\ncollected or is collecting the personal information, or necessary for\nthat agency to operate a program authorized by law, or authorized by\nstate or federal statute or regulation;\n  2. made pursuant to a court order or by law;\n  3. for the purpose of validating the identity of the user; or\n  4. if the information is used solely for statistical purposes and is\nin a form that cannot be used to identify any particular person.","path":["State Technology Law","Article 2. Internet Security and Privacy Act"],"source_url":"https://legislation.nysenate.gov/api/3/laws/STT/206","current_through":"2026-09-11","vintage":"","retrieved_at":"2026-09-14T19:32:45Z","sha256":"8f7e2e77dd760ef7b70ad33466158151cd3bb6691df665648c03b3e0b952cec8","source_id":"us-ny","stale":false,"prev":"us-ny/n.y.-state-technology-law-205","next":"us-ny/n.y.-state-technology-law-207"},"notice":"GroundRules: Original legal text. Not legal advice."}