New York cybersecurity law seeks to limit tech products agencies can buy

New York has taken a major step to bolster its cybersecurity defenses with the signing of AB A2237, a new law that aims to keep sensitive government data out of the hands of foreign adversaries and reduce the risk of cyberattacks by limiting what technology state and local governments can buy.

The law, signed by Gov. Kathy Hochul on Monday, bars New York state and its municipalities from purchasing certain technology products made by international companies that have close ties to foreign governments and are legally required to share data or cooperate with intelligence gathering.

Under the law, the state’s chief information officer, in consultation with homeland security and procurement officials, must maintain and regularly update a list of restricted technologies, such as computers, webcams, drones, semiconductors and other components that security experts say may contain hidden “backdoors,” spyware, or vulnerabilities that hackers can exploit. Any technology on this list cannot be bought by New York’s state agencies or local governments unless a waiver is issued under narrow conditions, such as when “no secure alternative” is available at a reasonable price.

Read more at StateScoop