N.Y. General Business Law § 899-JJ
Sections eight hundred ninety-nine-ff and eight hundred ninety-nine-gg of this article shall not apply where a third-party operator is processing the personal data of a covered user of another website, online service, online application, mobile application, or connected device, or portion thereof, provided that the third-party operator received reasonable written representations that the covered user provided informed consent for such processing, or: