Bill Text: NY A08330 | 2019-2020 | General Assembly | Introduced

---

Bill Title: Relates to contracts pertaining to information technology cloud services; requires bidders for such contracts to be certified by the federal risk authorization management program.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced - Dead) 2020-01-08 - referred to local governments [A08330 Detail]

Download: New_York-2019-A08330-Introduced.html

---

                STATE OF NEW YORK
        ________________________________________________________________________

                                          8330

                               2019-2020 Regular Sessions

                   IN ASSEMBLY

                                      June 14, 2019
                                       ___________

        Introduced by M. of A. CUSICK -- read once and referred to the Committee
          on Local Governments

        AN  ACT  to  amend  the  general municipal law, in relation to contracts
          pertaining to information technology cloud services

          The People of the State of New York, represented in Senate and  Assem-
        bly, do enact as follows:

     1    Section  1.  Section  103  of  the general municipal law is amended by
     2  adding a new subdivision 1-d to read as follows:
     3    1-d.  For  contracts  pertaining  to  information   technology   cloud
     4  services,  bidders  must  be certified by the federal risk authorization
     5  management program, also known as  FedRAMP,  or  an  equivalent  certif-
     6  ication,  which  will be audited regularly, as determined by the commis-
     7  sioner of the office of general services. As used in  this  subdivision,
     8  "federal  risk authorization management program" and "FedRAMP" refers to
     9  the program established by the United States government used  to  deter-
    10  mine  whether  cloud products and services are secure enough to be used.
    11  Costs of complying with this subdivision shall be borne entirely by  the
    12  bidding company.
    13    § 2. This act shall take effect three hundred sixty-five days after it
    14  shall  have  become  a law. Effective immediately, the office of general
    15  services is authorized to take actions necessary to promulgate rules and
    16  regulations related to the implementation of this act on or before  such
    17  date.



         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD13209-01-9