NYC Enacts Law Protecting Tenant Data Privacy

On May 30, 2021, the New York City Council enacted the Tenant Data Privacy Act (TDPA) without the signature of Mayor Bill de Blasio. The TDPA requires the owners of Class A multifamily dwellings with smart access systems to protect the personal information of occupants by providing tenants with a privacy policy, limiting the right to collect and retain data from smart access systems and from tenants' usage of utilities and internet services, and creating a private right of action for violations. The TDPA becomes effective 60 days after becoming law (July 29, 2021), except that owners of an existing smart access building are not liable for violations until January 1, 2023.