S T A T E O F N E W Y O R K
________________________________________________________________________
6774
2021-2022 Regular Sessions
I N A S S E M B L Y
April 8, 2021
___________
Introduced by M. of A. CUSICK -- read once and referred to the Committee
on Local Governments
AN ACT to amend the general municipal law, in relation to contracts
pertaining to information technology cloud services
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. Section 103 of the general municipal law is amended by
adding a new subdivision 1-d to read as follows:
1-D. FOR CONTRACTS PERTAINING TO INFORMATION TECHNOLOGY CLOUD
SERVICES, BIDDERS MUST BE CERTIFIED BY THE FEDERAL RISK AUTHORIZATION
MANAGEMENT PROGRAM, ALSO KNOWN AS FEDRAMP, OR AN EQUIVALENT CERTIF-
ICATION, WHICH WILL BE AUDITED REGULARLY, AS DETERMINED BY THE COMMIS-
SIONER OF THE OFFICE OF GENERAL SERVICES. AS USED IN THIS SUBDIVISION,
"FEDERAL RISK AUTHORIZATION MANAGEMENT PROGRAM" AND "FEDRAMP" REFERS TO
THE PROGRAM ESTABLISHED BY THE UNITED STATES GOVERNMENT USED TO DETER-
MINE WHETHER CLOUD PRODUCTS AND SERVICES ARE SECURE ENOUGH TO BE USED.
COSTS OF COMPLYING WITH THIS SUBDIVISION SHALL BE BORNE ENTIRELY BY THE
BIDDING COMPANY.
§ 2. This act shall take effect three hundred sixty-five days after it
shall have become a law. Effective immediately, the office of general
services is authorized to take actions necessary to promulgate rules and
regulations related to the implementation of this act on or before such
date.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD01896-01-1