Shown verbatim: the complete text as captured from the official source posted by the New York State Senate, fetched 2026-08-11. Nothing is edited or removed. Where this bill amends existing law, language marked for deletion in the official source appears here in brackets. The official bill page.
S T A T E O F N E W Y O R K
________________________________________________________________________
426
2025-2026 Regular Sessions
I N A S S E M B L Y
(PREFILED)
January 8, 2025
___________
Introduced by M. of A. OTIS -- read once and referred to the Committee
on Science and Technology
AN ACT to amend the state finance law, in relation to procurement
requirements for end point device security
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. Subdivision 9 of section 165 of the state finance law, as
added by a chapter of the laws of 2024 amending the state finance law
relating to procurement requirements for end point device security, as
proposed in legislative bills numbers S. 5615 and A. 2833, is amended to
read as follows:
9. End point device security. (a) For the purposes of this subdivision
"end point device" shall mean personal computing goods that include
desktops, laptops, all-in-ones, tablets, mobile or cellular telephones,
thin clients, and monitors of various sizes; printers; and multi-func-
tional devices that include imaging devices that combine operations such
as copying, printing, scanning and faxing into one machine.
(b) The commissioner and all state agencies, when procuring end point
devices, shall [require those devices, services and solutions to meet]
BE CONSISTENT WITH ANY RELEVANT STANDARDS, GUIDELINES, OR GUIDANCE
DEVELOPED AS PART OF the National Institute of Standards and Technology
(NIST) Cybersecurity Framework.
[(c) Within one year of adoption of any amendments to the security
standards and guidelines referenced in paragraph (b) of this subdivision
the commissioner and each state agency shall update their end point
device procurement requirements.]
§ 2. This act shall take effect on the same date and in the same
manner as a chapter of the laws of 2024 amending the state finance law
relating to procurement requirements for end point device security, as
proposed in legislative bills numbers S. 5615 and A. 2833, takes effect.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD02682-01-5Every fact on this page links to its source, starting with the official bill record.