The New York Privacy Act Would Allow Direct Action