S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   2237
 
                        2025-2026 Regular Sessions
 
                           I N  A S S E M B L Y
 
                             January 15, 2025
                                ___________
 
 Introduced  by  M. of A. RAJKUMAR, ALVAREZ, LEMONDES, K. BROWN, STERN --
   read once and referred to the Committee on Governmental Operations
 
 AN ACT to amend the state finance law and the general municipal law,  in
   relation  to  prohibiting procurement of certain technology that poses
   security threats

   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section  1.  The  state finance law is amended by adding a new section
 163-e to read as follows:
   § 163-E. RESTRICTION ON PURCHASING CERTAIN TECHNOLOGY  WHICH  POSES  A
 SECURITY  THREAT.  1.  (A) NOTWITHSTANDING ANY INCONSISTENT PROVISION OF
 LAW, THE STATE AND ANY DEPARTMENT, BUREAU, BOARD, COMMISSION, AUTHORITY,
 AND ANY OTHER AGENCY OR INSTRUMENTALITY OF THE  STATE  SHALL  NOT  ENTER
 INTO  OR  RENEW  ANY  CONTRACT  OR  AGREEMENT TO PROCURE INFORMATION AND
 COMMUNICATIONS TECHNOLOGY, INCLUDING HARDWARE, SYSTEMS,  DEVICES,  SOFT-
 WARE,  OR SERVICES THAT INCLUDE EMBEDDED OR INCIDENTAL INFORMATION TECH-
 NOLOGY, WHICH  ARE  PROHIBITED  FROM  FEDERAL  PROCUREMENT  PURSUANT  TO
 SECTION 889 OF PUBLIC LAW 115-232 OF 2018.
   (B) THE TERM "INFORMATION AND COMMUNICATIONS TECHNOLOGY" MEANS:
   (I) INFORMATION TECHNOLOGY, AS DEFINED IN SECTION 11101 OF TITLE 40;
   (II) INFORMATION SYSTEMS, AS DEFINED IN 44 U.S.C. 3502; AND
   (III) TELECOMMUNICATIONS EQUIPMENT AND TELECOMMUNICATIONS SERVICES, AS
 THOSE  TERMS  ARE DEFINED IN SECTION 3 OF THE COMMUNICATIONS ACT OF 1934
 (47 U.S.C. 153).
   (C) THE TERM "INFORMATION AND  COMMUNICATIONS  TECHNOLOGY"  SHALL  NOT
 INCLUDE AUTOMATED-DECISION MAKING SYSTEMS.
   2. THE CHIEF INFORMATION OFFICER SHALL, IN CONSULTATION WITH THE DIVI-
 SION  OF  HOMELAND  SECURITY  AND  EMERGENCY  SERVICES AND THE OFFICE OF
 GENERAL SERVICES, ESTABLISH AND UPDATE REGULARLY A  LIST  OF  RESTRICTED
 INFORMATION AND COMMUNICATIONS TECHNOLOGY. TECHNOLOGY ON THIS LIST SHALL
 NOT  BE PROCURED BY ANY STATE AGENCY, STATE OR LOCAL AUTHORITY, OR POLI-
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD01015-01-5
              

 A. 2237                             2
 
 TICAL SUBDIVISION UNLESS A WAIVER  IS  ISSUED  PURSUANT  TO  SUBDIVISION
 THREE  OF  THIS SECTION OR THE CHIEF INFORMATION OFFICER DETERMINES THAT
 THE TECHNOLOGY SHALL ONLY BE RESTRICTED IN LIMITED CIRCUMSTANCES.
   THE LIST SHALL:
   (A)  CONTAIN  INFORMATION  AND COMMUNICATIONS TECHNOLOGIES THAT POSE A
 SECURITY RISK TO THE STATE OF NEW YORK OR ITS POLITICAL SUBDIVISIONS. IN
 DETERMINING WHETHER INFORMATION AND COMMUNICATIONS TECHNOLOGY POSES SUCH
 A RISK, THE CHIEF INFORMATION OFFICER  SHALL  CONSULT  RELEVANT  FEDERAL
 SOURCES,  INCLUDING  THE DEPARTMENT OF DEFENSE  INSPECTOR GENERAL REPORT
 NO. DODIG-2019-106, AS WELL AS ANY OTHER SOURCE THAT SHALL BE DETERMINED
 TO BE RELEVANT;
   (B) DESCRIBE THE SCOPE OF EACH RESTRICTION,  SUCH  AS  WHETHER  IT  IS
 GENERALLY  PROHIBITED  OR  PROHIBITED  IN  CERTAIN CIRCUMSTANCES OR FROM
 CERTAIN ENTITIES;
   (C) INCLUDE AN EXPLANATION AS TO WHY ITEMS WERE INCLUDED ON THE  LIST;
 AND
   (D)  BE  PUBLISHED ONLINE AND COMMUNICATED TO ALL RELEVANT PROCUREMENT
 OFFICERS IN ALL STATE AGENCIES, STATE AUTHORITIES, AND POLITICAL  SUBDI-
 VISIONS.
   3.  THE  COMMISSIONER OF HOMELAND SECURITY AND EMERGENCY SERVICES, THE
 COMMISSIONER OF THE OFFICE OF GENERAL SERVICES,  THE  ADJUTANT  GENERAL,
 THE  CHIEF INFORMATION OFFICER, THE CHIEF CYBER OFFICER, THE CHIEF TECH-
 NOLOGY OFFICER OF THE CITY OF NEW YORK AND ANY FEDERAL AGENCY AUTHORIZED
 UNDER SECTION 889 OF PUBLIC LAW 115-232 OF 2018, MAY  PROVIDE  A  WAIVER
 FROM THIS SECTION IF:
   (A)  ANY  SUCH ENTITY DETERMINES THE WAIVER IS IN THE INTERESTS OF THE
 STATE OR POLITICAL SUBDIVISION;
   (B) NO COMPLIANT PRODUCT OR SERVICE IS AVAILABLE TO  BE  PROCURED  AS,
 AND  WHEN,  NEEDED AT UNITED STATES MARKET PRICES OR A PRICE THAT IS NOT
 CONSIDERED PROHIBITIVELY EXPENSIVE; AND
   (C) SUCH WAIVER COULD NOT REASONABLY BE  EXPECTED  TO  COMPROMISE  THE
 SECURITY OR INTEGRITY OF A COMPUTER NETWORK OPERATED BY AN INSTRUMENTAL-
 ITY OF THE STATE.
   4. NOTHING IN THIS SECTION SHALL BE CONSTRUED:
   (A)  TO REQUIRE ANY INFORMATION AND COMMUNICATIONS TECHNOLOGY RESIDENT
 IN EQUIPMENT, SYSTEMS, OR SERVICES AS OF THE DAY  BEFORE  THE  EFFECTIVE
 DATE OF THIS SECTION TO BE REMOVED OR REPLACED;
   (B)  TO  PROHIBIT  OR  LIMIT  THE  UTILIZATION OF SUCH INFORMATION AND
 COMMUNICATIONS TECHNOLOGY THROUGHOUT  THE  LIFECYCLE  OF  SUCH  EXISTING
 EQUIPMENT; OR
   (C) TO REQUIRE THE RECIPIENT OF A STATE CONTRACT, GRANT, LOAN, OR LOAN
 GUARANTEE  TO REPLACE INFORMATION AND COMMUNICATIONS TECHNOLOGY RESIDENT
 IN EQUIPMENT, SYSTEMS, OR SERVICES BEFORE THE  EFFECTIVE  DATE  OF  THIS
 SECTION.
   §  2.  The  general  municipal  law is amended by adding a new section
 103-h to read as follows:
   § 103-H.  RESTRICTION ON PURCHASING CERTAIN TECHNOLOGY WHICH  POSES  A
 SECURITY  THREAT.  1.  (A) NOTWITHSTANDING ANY INCONSISTENT PROVISION OF
 LAW A POLITICAL SUBDIVISION SHALL NOT ENTER INTO OR RENEW  ANY  CONTRACT
 OR  AGREEMENT  TO  PROCURE  INFORMATION  AND  COMMUNICATIONS TECHNOLOGY,
 INCLUDING HARDWARE, SYSTEMS, DEVICES, SOFTWARE, OR SERVICES THAT INCLUDE
 EMBEDDED OR INCIDENTAL INFORMATION TECHNOLOGY, WHICH ARE PROHIBITED FROM
 FEDERAL PROCUREMENT PURSUANT TO SECTION 889 OF  PUBLIC  LAW  115-232  OF
 2018,  OR WHICH ARE INCLUDED ON THE LIST CREATED PURSUANT TO SUBDIVISION
 TWO OF SECTION ONE HUNDRED SIXTY-THREE-E OF THE STATE FINANCE LAW.
   (B) THE TERM "INFORMATION AND COMMUNICATIONS TECHNOLOGY" MEANS:
 A. 2237                             3
 
   (I) INFORMATION TECHNOLOGY, AS DEFINED IN 40 U.S.C. 11101;
   (II) INFORMATION SYSTEMS, AS DEFINED IN 44 U.S.C. 3502; AND
   (III) TELECOMMUNICATIONS EQUIPMENT AND TELECOMMUNICATIONS SERVICES, AS
 THOSE  TERMS  ARE DEFINED IN SECTION 3 OF THE COMMUNICATIONS ACT OF 1934
 (47 U.S.C. 153).
   2.  THE COMMISSIONER OF HOMELAND SECURITY AND EMERGENCY SERVICES,  THE
 COMMISSIONER  OF  THE  OFFICE OF GENERAL SERVICES, THE ADJUTANT GENERAL,
 THE CHIEF INFORMATION OFFICER, THE CHIEF CYBER OFFICER, THE CHIEF  TECH-
 NOLOGY OFFICER OF THE CITY OF NEW YORK AND ANY FEDERAL AGENCY AUTHORIZED
 UNDER  SECTION  889  OF PUBLIC LAW 115-232 OF 2018, MAY PROVIDE A WAIVER
 FROM THIS SECTION IF:
   (A) ANY SUCH ENTITY DETERMINES THE WAIVER IS IN THE  INTEREST  OF  THE
 POLITICAL SUBDIVISION;
   (B)  NO  COMPLIANT  PRODUCT OR SERVICE IS AVAILABLE TO BE PROCURED AS,
 AND WHEN, NEEDED AT UNITED STATES MARKET PRICES OR A PRICE THAT  IS  NOT
 CONSIDERED PROHIBITIVELY EXPENSIVE; AND
   (C)  SUCH  WAIVER  COULD  NOT REASONABLY BE EXPECTED TO COMPROMISE THE
 SECURITY OR INTEGRITY OF A COMPUTER NETWORK OPERATED BY AN INSTRUMENTAL-
 ITY OF THE STATE.
   4. NOTHING IN THIS SECTION SHALL BE CONSTRUED:
   (A) TO REQUIRE ANY INFORMATION AND COMMUNICATIONS TECHNOLOGY  RESIDENT
 IN  EQUIPMENT,  SYSTEMS,  OR SERVICES AS OF THE DAY BEFORE THE EFFECTIVE
 DATE OF THIS SECTION TO BE REMOVED OR REPLACED;
   (B) TO PROHIBIT OR LIMIT  THE  UTILIZATION  OF  SUCH  INFORMATION  AND
 COMMUNICATIONS  TECHNOLOGY  THROUGHOUT  THE  LIFECYCLE  OF SUCH EXISTING
 EQUIPMENT; OR
   (C) TO REQUIRE THE RECIPIENT OF A STATE CONTRACT, GRANT, LOAN, OR LOAN
 GUARANTEE TO REPLACE INFORMATION AND COMMUNICATIONS TECHNOLOGY  RESIDENT
 IN  EQUIPMENT,  SYSTEMS,  OR  SERVICES BEFORE THE EFFECTIVE DATE OF THIS
 SECTION.
   § 3. No later than the effective date  of  this  act,  the  office  of
 general  services shall promulgate rules and regulations and issue guid-
 ance to all state agencies and local procurement authorities  necessary,
 including  providing   updates   on prohibited  or excluded entities for
 procurement contracts in conformity with federal law,  rules  and  regu-
 lations,  no  later  than  sixty  days after any entity is prohibited or
 excluded.
   § 4. This act shall take effect two years after it shall have become a
 law. Effective immediately, the office of general services is authorized
 to promulgate rules and regulations and  issue  guidance  to  all  state
 agencies and local procurement authorities necessary for the implementa-
 tion  of  this act on its effective date, including providing updates on
 prohibited or excluded entities for procurement contracts in  conformity
 with federal law, rules and regulations.