New York AI Governance — Trustible
New York RAISE Act · NYC Local Law 144 · AI Companion Law · Algorithmic Pricing Disclosure Act

New York AI Governance

New York regulates AI at both the state and city level, with no single unifying statute tying the pieces together. The RAISE Act governs frontier model developers, NYC’s Local Law 144 governs employment AI within city limits, a 2025 companion chatbot law protects consumers interacting with AI companions, and a first-of-its-kind algorithmic pricing law requires disclosure when AI sets a price using personal data. Insurers face a separate layer of guidance from the Department of Financial Services.

Requirement
What It Means
Frontier AI Framework
Large frontier developers must publish an annually reviewed safety framework covering catastrophic-risk thresholds, mitigations, third-party assessment, and incident response.
Transparency Report
All frontier developers must publish a report before or at deployment covering intended uses and modalities; large developers add catastrophic-risk assessment summaries. An existing model or system card can satisfy this requirement.
Critical Safety Incident Reporting
72 hours to the new DFS oversight office after determining an incident occurred, or 24 hours to law enforcement if there’s imminent risk of death or injury.
Large-Developer Disclosure Statement
Biennial filing with DFS covering ownership, New York offices, and contacts, plus a pro rata assessment fee, with a public list maintained.

The New York Attorney General enforces the RAISE Act, with civil penalties up to $1 million for a first violation and $3 million for subsequent violations (reduced from an earlier $10 million/$30 million proposal), plus a separate $1,000-per-day penalty from DFS for failure to file a disclosure statement. There is no private right of action.

Requirement
What It Means
Annual Independent Bias Audit
Requires disparate-impact testing across EEO categories within one year prior to use of the tool.
Public Posting of Audit Results
Requires publishing a summary of audit results, including adverse-impact ratios and methodology, on the employer’s website.
Candidate and Employee Notice
Requires notice at least 10 business days before AEDT use, including disclosure of the qualifications and characteristics assessed.

The NYC Department of Consumer and Worker Protection enforces the law, with civil penalties of $500 to $1,500 per day of violation, each day counted separately. A December 2025 New York State Comptroller audit found weak DCWP oversight to date, and DCWP has since launched targeted investigations of hundreds of employers in 2026, so enforcement activity is actively increasing.

Requirement
What It Means
Recurring AI Disclosure
Operators must clearly disclose that the user is interacting with AI, not a human, at session start and at least every three hours of continued use.
Self-Harm Safety Protocol
Operators must implement a protocol to detect expressions of suicidal ideation or self-harm and refer users to crisis service providers.

The New York Attorney General enforces the law exclusively, with civil penalties up to $15,000 per day per violation, with proceeds funding state suicide-prevention programs. There is no private right of action and no annual reporting or public-posting obligation.

Requirement
What It Means
Conspicuous Price Disclosure
Businesses must display the required disclosure both online and in-store wherever an algorithmically personalized price is shown.
Exemptions
Insurers, federally regulated financial institutions, and some subscription pricing models are exempt from the disclosure requirement.

The New York Attorney General enforces the law, with penalties up to $1,000 per occurrence.

Requirement
What It Means
Three-Step Disparate-Effect Assessment
Requires assessment of external consumer data and AI systems used in underwriting and pricing.
Governance and Testing
Requires board and senior-management governance, and documented testing before and during deployment.
Vendor Oversight and Transparency
Requires vendor oversight and consumer-facing transparency about AI use and the right to request details.

DFS enforces through its examination authority rather than a per-violation penalty statute. It’s supervisory guidance rather than a statute, but DFS enforces it through its examination authority over every NY-authorized insurer, HMO, and fraternal benefit society, making practical compliance effectively mandatory for regulated entities.

How Trustible Supports New York Compliance

Compliance
Trustible Capability
AI Inventory
Separately tracks frontier model dependencies, NYC-scoped employment AI, consumer-facing AI companions, and algorithmic pricing tools, since each triggers a different New York law.
Automated Workflows
Orchestrates Local Law 144’s 10-day notice window and annual bias audit cycle, and AI companion disclosure timing, without manual tracking against each deadline.
Risk Management
Documents the three-step disparate-effect assessment DFS Circular Letter 2024-7 expects for insurance underwriting and pricing AI, with inherent and residual risk scoring.
Model and Vendor Evaluations
Surfaces whether foundation model vendors meet RAISE Act frontier or large frontier developer thresholds and can produce required safety and transparency documentation.
Reporting & Dashboards
Publishes the bias audit summaries Local Law 144 requires on a public-facing basis, and generates DFS-ready examination documentation for insurers.
Insights Taxonomies
Keeps AEDT, AI companion, and frontier-model definitions current as NYC DCWP enforcement and the new DFS oversight office issue further guidance.

Your First 90 Days

Day 30: Separate State, City, and Sector Obligations

Classify AI systems by which New York regime applies: RAISE Act frontier-model dependencies, NYC Local Law 144 employment tools, AI companion products, algorithmic pricing tools, or DFS-regulated insurance AI.

Day 60: Complete Bias Audits and Disparate-Effect Assessments

Run or refresh the annual independent bias audit required for any AEDT used to evaluate NYC-resident candidates, and complete DFS’s three-step disparate-effect assessment for any underwriting or pricing AI.

Day 90: Publish Required Disclosures and Confirm Vendor Documentation

Post bias audit summaries publicly as Local Law 144 requires, confirm AI companion disclosure cadence and self-harm protocols are live, and verify foundation model vendors can produce RAISE Act safety and transparency documentation ahead of the January 2027 effective date.

New York AI FAQs

January 1, 2027. The original bill was signed December 19, 2025, but a chapter amendment finalized in March 2026 changed key thresholds and delayed the effective date.

Yes, if the employer uses an Automated Employment Decision Tool to evaluate a candidate or employee who resides in New York City, regardless of where the employer itself is located.

No. Unlike California’s comparable law, New York’s AI companion disclosure and self-harm safety protocol requirements apply to all users regardless of age.

A conspicuous disclosure, both online and in-store, stating that the price was set by an algorithm using the consumer’s personal data, unless the business falls under an exemption such as insurance or federally regulated financial services.

It’s supervisory guidance rather than a statute, but DFS enforces it through its examination authority over every NY-authorized insurer, HMO, and fraternal benefit society, making practical compliance effectively mandatory for regulated entities.

See How Trustible Operationalizes New York AI Compliance in a Unified Governance Program.

© 2026 Trustible