Will end procurement of tech vulnerable to cyberattack
South Queens, NY: Assemblywoman Jenifer Rajkumar’s groundbreaking cybersecurity legislation A2237, has been passed unanimously and signed into law. The bill shields New Yorkers from cyberattacks and keeps sensitive information out of the wrong hands. Her bill prohibits the State and all municipalities from purchasing technology from certain international companies whose products threaten national security. These manufacturers have close ties to the government of another country, which legally requires them to share any data or cooperate with any intelligence gathering, creating a perfect storm for cyberattacks and espionage by hostile actors.
This international tech—including computers, webcams, drones, and semiconductors resident in other companies’ products—has been exposed as a dangerous liability capable of silently transmitting sensitive data or allowing hackers to take control remotely. A Pentagon report confirmed that the use of such tech compromises national security, warning that “adversaries could exploit known cybersecurity vulnerabilities that exist.” Many of these products are already banned from federal procurement due to the extreme risk.
Alarmingly, New York State and local governments spend in the hundreds of millions on this insecure tech. Major offenders include New York City Public Schools—which on average suffers one data security incident per year—having contracts totaling $330 million for computers known to have hidden spyware, malware, vulnerabilities for hackers to exploit, and “backdoors” to control devices remotely. Another user is the Legislative Bill Drafting Commission in Albany, which in 2024 experienced a cyberattack that stole payroll data and shut down the bill drafting system the very week annual budget bills were being finalized. Alarmingly, New York State Troopers and the NYPD have used imported drones determined with high confidence to send data to their home country’s government for strategic decisionmaking.
Assemblywoman Rajkumar generated support for her bill over two years, and now millions of New Yorkers will finally have unprecedented protection from malicious actors.
The new prohibition on certain imported semiconductors also bolsters New York’s booming semiconductor industry, which has already attracted $124 billion in investments since 2022. A cornerstone of this industry is the Micron Technology semiconductor fabrication facility opening in Clay, New York. The $100 billion facility is the single largest private investment in United States history, and will create 50,000 jobs.
Assemblywoman Rajkumar said, “I am committed to keeping New Yorkers safe, and that includes cybersafety. When you decide to purchase tech, you might ask, ‘Does it work well? Is this a good price?’ Likely you do not ask, ‘Is this going to send my data to another country’s government?’ My bill guarantees that every procurement officer in New York asks this crucial question. From our power plants to our public transit to our servers packed with sensitive information, our procurement decisions determine whether or not there is an open door for hackers. This bill leverages billions of dollars in purchasing power to keep dangerous tech off our shores and uplift our domestic semiconductor industry.”
