This bill would require any agency disposing of electronic equipment that contains a data storage device, including printers, copiers and computers, to fully erase such device before its disposal. Disposal includes transfers of equipment between agencies when such equipment contains sensitive or confidential information that is not relevant to the work of the agency receiving the equipment. City agencies, and third party contractors obligated to dispose of such equipment, must also certify that they have complied with the law.
- Enacted
History
Affirmative
- Inez D. Barron
- Joseph C. Borelli
- James G. Van Bramer
- Fernando Cabrera
- Margaret S. Chin
- Andrew Cohen
- Costa G. Constantinides
- Robert E. Cornegy, Jr.
- Elizabeth S. Crowley
- Laurie A. Cumbo
- Chaim M. Deutsch
- Daniel Dromm
- Rafael L. Espinal, Jr.
- Mathieu Eugene
- Julissa Ferreras-Copeland
- Daniel R. Garodnick
- Vincent J. Gentile
- Vanessa L. Gibson
- David G. Greenfield
- Barry S. Grodenchik
- Corey D. Johnson
- Ben Kallos
- Andy L. King
- Peter A. Koo
- Karen Koslowitz
- Rory I. Lancman
- Brad S. Lander
- Stephen T. Levin
- Mark Levine
- Alan N. Maisel
- Melissa Mark-Viverito
- Steven Matteo
- Darlene Mealy
- Carlos Menchaca
- Rosie Mendez
- I. Daneek Miller
- Donovan J. Richards
- Ydanis A. Rodriguez
- Helen K. Rosenthal
- Rafael Salamanca, Jr.
- Ritchie J. Torres
- Mark Treyger
- Eric A. Ulrich
- James Vacca
- Paul A. Vallone
- Jumaane D. Williams
Medical
Absent
Int. No. 1052-A
By Council Members Vacca, Levin, Kallos and Barron
A Local Law to amend the administrative code of the city of New York, in relation to agency disposal of electronics
Be it enacted by the Council as follows:
Section 1. Chapter 5 of title 10 of the administrative code of the city of New York is amended by adding a new section 10-504 to read as follows:
§ 10-504 Agency disposal of electronics. a. Any agency that disposes of electronic equipment that contains a hard disk drive, solid state drive or similar device capable of storing information while powered off, including but not limited to printers, copiers and computers, shall ensure, before its disposal, the erasure of all information contained therein, either through degaussing, physical destruction of the drive, a data wiping that includes at least two full overwrites or another erasure method specified by the department of information technology and telecommunications after consultation with all relevant agencies. This requirement shall not apply to boot related firmware.
b. Each agency shall require any third party who disposes of electronic equipment on its behalf to provide the agency a written certification that the disposal complies with the requirements set forth in this section and shall forward such certification to the department of information technology and telecommunications. Every two years each agency that has disposed of electronic equipment itself shall submit a statement to the department of information technology and telecommunications certifying that its disposal of such electronic equipment complies with the requirements set forth in this section.
c. For the purposes of this section, the term “dispose” includes a transfer of electronic equipment from one agency to another when such equipment has stored information that is confidential or sensitive in nature and is not relevant to the work of the agency receiving such equipment.
§ 2. This local law takes effect one year after it becomes law.