Relates to prohibiting the procurement of certain technology and products which pose a state or national security risk

New York limits risky government technology purchases

The law bars New York public agencies, authorities, and local governments from buying or renewing contracts for federally prohibited technology. It covers information technology, information systems, and telecommunications hardware, software, devices, and services. The state technology office must also maintain a security-risk list, post it online, and notify procurement officers. Listed technology is barred unless a waiver applies or the office limits the circumstances covered by the restriction. Waivers must serve state or local interests, with no compliant option available when needed at U.S. market prices or a price that is not prohibitively expensive. They also must not reasonably threaten the security or integrity of a state-operated computer network. State agencies must give notice within 30 days after waiver approval. Public entities receiving authorized federal waivers must notify the state technology office within 30 days. Drones and related equipment or services are exempt if collected data stays exclusively in the United States and the restricted vendor cannot access it. They also qualify if operated with software developed and maintained in the United States. The law does not discourage buying U.S.-made drones. It does not require removing or replacing technology already installed as of the day before the applicable effective date. Public entities and recipients of state contracts, grants, loans, or loan guarantees can keep using that technology throughout its existing equipment's lifecycle. Guidance must reach state and local procurement offices within 60 days after an entity becomes prohibited or excluded. The amendment law takes effect immediately, while its main changes follow the related 2025 law's effective date. The implementation schedule provides a two-year delay after enactment and authorizes immediate guidance.