Senate bill · S1139 (2025-26)

Relates to requiring governmental entities to implement multifactor authentication for local and remote network access

PassedLatest action May 29, 2026

New York State Senate

Same as A6347, the matching bill in the Assembly.

Passed as A6347, the matching Assembly bill.

Sponsor

Kristen Gonzalez

State Senator, District 59 · Democratic/Working Families

Summary

Requires governmental entities to, whenever possible and feasible, consider implementing multifactor authentication for local and remote network access; requires public websites to encrypt all exchanges and to comply with privacy standards.

Summary from NY Open Legislation. How we handle summaries

Amends the State Technology Law.

From NY Open Legislation, the NY Senate and Assembly, and official rosters. This record was last updated Oct 22, 2026. About our data

Following needs an Agora account. You will sign in first, then come back to this page.

Your position on this bill

Choose the position closest to yours. You'll sign in or create an account to save it.

Purpose, from the sponsor's memo

Amends the State Technology Law to require all government entities in the State to require muttifactor authentication for access to the serv- ers, email or official applications used by their employees or agents.

Filed with the bill. Read it on nysenate.gov (opens in a new tab)

Where it stands

Passed the legislature and is awaiting a signature.

Introduced
In committee
Up for a vote
Passed one chamber
Passed
Enacted

Committee

Internet And Technology · New York State Senate

Also referred to Ways and Means · New York State Assembly.

Cosponsors

William Colton

Showing the cosponsors who are on Agora, A to Z. The official record may list more.

Read on NY Senate

Democratic1

Shown in neutral colors by design; Agora is non-partisan.

William Colton

The sponsor's argument

Why Kristen Gonzalez says this is needed

Cyberattacks on public entities are occurring with increasing frequency. In Microsoft's 2021 cybersecurity report, 48% of all cybersecurity attacks targeted government entities. Since 2017, more than 3,600 local, state, and tribal governments across the country have been targeted by ransomware hackers, which is just one type of cyberattack. Lapses in cybersecurity could require the state's most essential services to decide between paying expensive ransoms or losing access to systems. Muttifactor authentication (MFA) can significantly reduce the vulner- ability of public systems. According to Google, multifactor can prevent 100% of automated bots, up to 99% of bulk phishing attacks and up to 90% of targeted attacks. According to Microsoft, an account is 99.9% less likely to be compromised when using MFA. Therefore requiring the use of MFA at sensitive governmental institutions is an important step the state can take to improve its cybersecurity preparedness. Importantly, MFA is cost effective to implement due to the connectivity of devices and web applications. Requiring governmental agencies to use this technology is a low-cost proposition that can greatly increase protection against cyberattacks.

This is the sponsor's own case for the bill, quoted from their memorandum. It is not Agora's description of what the bill does.

Recorded votes

Vote: Floor vote
NY SenateMay 29, 2026Result: passedSenate vote on A6347, the matching Assembly bill.
(54) (4) (0) (5)
Vote: Committee vote · Finance
Senate FinanceMay 19, 2026Result: passed
(20) (0) (0) (2)
Vote: Committee vote · Internet And Technology
Senate Internet And TechnologyFeb 25, 2026Result: passed
(6) (1) (0) (0)
Vote: Floor vote
NY SenateJun 11, 2025Result: passed
(55) (4) (0) (4)
Vote: Committee vote · Finance
Senate FinanceMay 28, 2025Result: passed
(20) (2) (0) (0)
Vote: Committee vote · Internet And Technology
Senate Internet And TechnologyFeb 10, 2025Result: passed
(6) (1) (0) (0)

Full history

May 29, 2026
3RD Reading CAL.1194
3RD READING CAL.1194
NY Senate
May 29, 2026
Passed a chamber
PASSED SENATE
NY Senate
May 29, 2026
Substituted
SUBSTITUTED BY A6347
NY Senate
May 21, 2026
Advanced to Third Reading
ADVANCED TO THIRD READING
NY Senate
May 20, 2026
2ND Report CAL.
2ND REPORT CAL.
NY Senate

Show full history (22 earlier events)

May 20, 2026
Sent to the executive
DELIVERED TO SENATE
NY Assembly
May 20, 2026
Passed a chamber
PASSED ASSEMBLY
NY Assembly
May 20, 2026
Referred to committee
REFERRED TO INTERNET AND TECHNOLOGY
NY Senate
May 20, 2026
Reported out of committee
REPORTED
NY Assembly
May 20, 2026
Rules Report CAL.144
RULES REPORT CAL.144
NY Assembly
May 19, 2026
1ST Report CAL.1194
1ST REPORT CAL.1194
NY Senate
May 19, 2026
Reported out of committee
REPORTED REFERRED TO RULES
NY Assembly
Feb 25, 2026
Reported out of committee
REPORTED AND COMMITTED TO FINANCE
NY Senate
Jan 7, 2026
Died in Assembly
DIED IN ASSEMBLY
NY Assembly
Jan 7, 2026
Referred to committee
REFERRED TO INTERNET AND TECHNOLOGY
NY Senate
Jan 7, 2026
Referred to committee
REFERRED TO WAYS AND MEANS
NY Assembly
Jun 11, 2025
Sent to the executive
DELIVERED TO ASSEMBLY
NY Senate
Jun 11, 2025
Passed a chamber
PASSED SENATE
NY Senate
Jun 11, 2025
Referred to committee
REFERRED TO WAYS AND MEANS
NY Assembly
Jun 4, 2025
Advanced to Third Reading
ADVANCED TO THIRD READING
NY Senate
May 29, 2025
2ND Report CAL.
2ND REPORT CAL.
NY Senate
May 28, 2025
1ST Report CAL.1343
1ST REPORT CAL.1343
NY Senate
May 27, 2025
Reported out of committee
REPORTED REFERRED TO RULES
NY Assembly
May 6, 2025
Reported out of committee
REPORTED REFERRED TO WAYS AND MEANS
NY Assembly
Mar 4, 2025
Referred to committee
REFERRED TO SCIENCE AND TECHNOLOGY
NY Assembly
Feb 10, 2025
Reported out of committee
REPORTED AND COMMITTED TO FINANCE
NY Senate
Jan 8, 2025
Referred to committee
REFERRED TO INTERNET AND TECHNOLOGY
NY Senate