Bill > S03259

This bill aims to align New York state and local procurement laws with federal restrictions on purchasing information and communications technology (ICT) that could pose security risks. The legislation prohibits state agencies, local authorities, and political subdivisions from entering into or renewing contracts for ICT products or services that are banned under federal law, specifically Section 889 of Public Law 115-232 from 2018. The chief information officer, in consultation with homeland security and other agencies, will establish and regularly update a list of restricted technologies, considering sources like the Department of Defense inspector general report. The bill defines ICT broadly, including information technology, information systems, and telecommunications equipment, but explicitly excludes automated-decision making systems. Entities can seek waivers for procurement under specific conditions, such as when no compliant alternative exists or when the waiver would not compromise network security. Importantly, the law does not require immediate removal of existing technology or replacement of current equipment, providing a transition period. The bill will take effect two years after becoming law, with the Office of General Services authorized to develop implementation guidance in the meantime, ensuring a comprehensive and thoughtful approach to protecting state technological infrastructure from potential security threats.

Budget and Finance

https://www.nysenate.gov/legislation/bills/2025/S3259