STATE OF NEW YORK ________________________________________________________________________ 1005 2023-2024 Regular Sessions IN SENATE January 9, 2023 ___________ Introduced by Sen. OBERACKER -- read twice and ordered printed, and when printed to be committed to the Committee on Internet and Technology AN ACT to amend the state technology law, in relation to conducting an examination and evaluation of New York state's information technology infrastructure, data use and management, policies, procedures and operational processes; and providing for the repeal of such provisions upon the expiration thereof The People of the State of New York, represented in Senate and Assem- bly, do enact as follows: 1 Section 1. Section 103 of the state technology law is amended by 2 adding two new subdivisions 23 and 24 to read as follows: 3 23. To contract with a private firm that specializes in conducting 4 information technology audits to conduct an examination and evaluation 5 of New York state's information technology infrastructure, applications, 6 data use and management, policies, procedures and operational processes. 7 Such evaluation and examination shall include, but not be limited to: 8 (a) the information technology infrastructure, applications, data use 9 and management, policies, procedures and operational processes of the 10 departments of labor and health; 11 (b) any and all applications and systems operated by the state and its 12 agencies that the public regularly utilizes to obtain and utilize 13 services provided the state, and/or to apply for and access any benefits 14 provided by or distributed by the state; 15 (c) a study of the applicable best practices being utilized in both 16 public and private internet and technology services; and 17 (d) identification of deficiencies and recommendations of how to 18 address said deficiencies in the state's information technology infras- 19 tructure, applications, data use and management, policies, procedures 20 and operational processes. 21 The office of technology services shall, on or before December thir- 22 ty-first, two thousand twenty-five, report the findings, conclusions and EXPLANATION--Matter in italics (underscored) is new; matter in brackets [] is old law to be omitted. LBD03600-01-3S. 1005 2 1 recommendations to the governor, the state comptroller, the tempo- 2 rary president of the senate, the speaker of the assembly, the minority 3 leader of the senate, the minority leader of the assembly, and the 4 chairs and ranking minority members of the senate and the assembly 5 internet and technology committees. 6 24. To request and receive from any department, division, board, 7 commission or other agency of the state any information and resources 8 necessary to carry out the responsibilities and provisions set forth in 9 subdivision twenty-three of this section. 10 § 2. This act shall take effect immediately and shall expire and be 11 deemed repealed January 3, 2026.