STATE OF NEW YORK ________________________________________________________________________

8330

2019-2020 Regular Sessions

IN ASSEMBLY

June 14, 2019 ___________

Introduced by M. of A. CUSICK -- read once and referred to the Committee on Local Governments

AN ACT to amend the general municipal law, in relation to contracts pertaining to information technology cloud services

The People of the State of New York, represented in Senate and Assem- bly, do enact as follows:

1 Section 1. Section 103 of the general municipal law is amended by 2 adding a new subdivision 1-d to read as follows: 3 1-d. For contracts pertaining to information technology cloud 4 services, bidders must be certified by the federal risk authorization 5 management program, also known as FedRAMP, or an equivalent certif- 6 ication, which will be audited regularly, as determined by the commis- 7 sioner of the office of general services. As used in this subdivision, 8 "federal risk authorization management program" and "FedRAMP" refers to 9 the program established by the United States government used to deter- 10 mine whether cloud products and services are secure enough to be used. 11 Costs of complying with this subdivision shall be borne entirely by the 12 bidding company. 13 § 2. This act shall take effect three hundred sixty-five days after it 14 shall have become a law. Effective immediately, the office of general 15 services is authorized to take actions necessary to promulgate rules and 16 regulations related to the implementation of this act on or before such 17 date.

EXPLANATION--Matter in italics (underscored) is new; matter in brackets [] is old law to be omitted. LBD13209-01-9