The New York Privacy Act still needs a sponsor in the state assembly, having been introduced in the senate. But experts are already warning that the bill, which allows private right of action, is tougher than the California Consumer Privacy Act (CCPA).