Under the law, the state\u2019s chief information officer, in consultation with homeland security and procurement officials, must maintain and regularly update a list of restricted technologies, such as computers, webcams, drones, semiconductors and other components that security experts say may contain hidden \u201cbackdoors,\u201d spyware, or vulnerabilities that hackers can exploit. Any technology on this list cannot be bought by New York\u2019s state agencies or local governments unless a waiver is issued under narrow conditions, such as when \u201cno secure alternative\u201d is available at a reasonable price.<\/p>\n
Federal agencies have already banned many of these technologies in recent years from their own procurement due to national security concerns. The new law will officially take effect in 2027, giving state and local agencies two years to prepare for compliance and adopt safe procurement practices once it is fully implemented.<\/p>\n
\u201cFrom our power plants to our public transit to our servers packed with sensitive information, our procurement decisions determine whether or not there is an open door for hackers,\u201d Assemblywoman Jenifer Rajkumar, the bill\u2019s primary sponsor, said in a statement. \u201cThis bill leverages billions of dollars in purchasing power to keep dangerous tech off our shores and uplift our domestic semiconductor industry.\u201d<\/p>\n
State and local governments spend hundreds of millions of dollars on technology each year, and many of New York\u2019s agencies have already suffered cyber incidents. <\/p>\n
Last year, the Legislative Bill Drafting Commission<\/a> was hit by a cyberattack that disrupted operations during budget negotiations. In 2023, the state Education Department\u2019s Privacy Office received 23 data incident reports related to phishing emails, while New York\u2019s educational agencies suffered approximately 40 cyberattacks, according to the office\u2019s annual report<\/a>.<\/p>\n Law enforcement agencies have also used imported drones that experts say could transmit sensitive data overseas. Earlier this month, the National Fraternal Order of Police urged<\/a> Congress to authorize state and local law enforcement with more power to stop criminal drone activity ahead of the upcoming 2026 World Cup and 2028 Olympics. <\/p>\n
![\"Sophia](\"https:\/\/www.newsbeep.com\/us-ny\/wp-content\/uploads\/2025\/12\/1767132366_661_sophiafox.jpg\")
<\/p>\n