Bill > A02237

This bill aligns New York state and local procurement laws with federal regulations aimed at preventing the purchase of information and communications technology (ICT) that could pose a security threat. Specifically, the bill prohibits state agencies, local authorities, and political subdivisions from entering into or renewing contracts for ICT products or services that are banned under federal law (Section 889 of Public Law 115-232 of 2018). The chief information officer, in consultation with homeland security and other agencies, will maintain and regularly update a list of restricted technologies, which will detail specific security risks, the scope of restrictions, and explanations for each listed item. The bill provides a mechanism for obtaining waivers from these restrictions if certain conditions are met, such as demonstrating that no compliant alternative is available at a reasonable price and that the waiver would not compromise network security. Importantly, the legislation does not require immediate removal of existing technology or replacement of current equipment, but rather aims to prevent future procurement of potentially risky technologies. The bill will take effect two years after becoming law, giving state and local agencies time to adjust their procurement practices, and authorizes the office of general services to develop implementation guidance in the meantime.

Budget and Finance, Government Affairs

https://www.nysenate.gov/legislation/bills/2025/A2237