An Act amending Title 62 (Procurement) of the Pennsylvania Consolidated Statutes, in contracts for public works, providing for contracts for information technology commodities and services.
SB 377 requires Pennsylvania state agencies to purchase information technology devices (like computers or tablets) that meet specific security standards when entering new public works contracts. It mandates that these devices, services, and solutions must be configurable, secure, and maintainable according to National Institute of Standards and Technology (NIST) guidelines or widely adopted industry security practices. The law applies only to contracts signed on or after its effective date (60 days after passage), affecting state agencies buying endpoint devices for public projects. This policy change directly impacts procurement decisions for IT hardware and services across Pennsylvania government operations.
Bill status
passed
4 of 5 stages cleared
Introduction
Mar 2025
Committee Review
Oct 2025
Senate Passage
Jun 2025
House Passage
Oct 2025
Governor
Introduced Mar 6, 2025
Last action Oct 7, 2025
Maddy AI version diff · 1 comparison
What changed between versions
Printer's No. PN0323
→
Printer's No. PN0865
·
2 edits
MINOR
The bill text was updated from the March version to the June amended version, reflecting changes made during the legislative process. The most significant substantive change is a modification to the security requirements for endpoint devices, shifting from a strict mandate to follow specific NIST guidelines to a more flexible standard that allows for widely adopted certifications or industry best practices if they are applicable.
Scope change
The bill's scope regarding security standards was broadened to allow for alternative compliance methods (industry best practices or other certifications) rather than strictly requiring NIST guidelines.
REQUIREMENT
The requirement for endpoint device security was changed from mandating NIST Special Publication 800-series guidelines to allowing compliance via NIST guidelines, widely adopted certifications, or industry best practices, depending on what is applicable.
TECHNICAL
The bill header and printer numbers were updated to reflect the amended version (PN 0865) and the date of third-reading consideration (June 3, 2025).
Floor votes · Senate Jun 4, 2025 · House Oct 7, 2025
How they voted
49–0
Passed · 1 other
Total votes 50
Jun 4, 2025
D
Democratic23
95% Yea
R
Republican27
100% Yea
Vote distribution
All Yea
All Nay
Mixed
No data
Full legislative history
Actions timeline
Total actions
14
Key actions
6
Committee
6
Amendments
1
Oct 7, 2025
House · Passed
House Vote: pass (26-0)
house
Oct 7, 2025
Lower · Passed
Reported as committed
lower
Jun 5, 2025
Committee
Referred to Communications & Technology
lower
Jun 4, 2025
Upper · Passed
Third consideration and final passage
upper
Jun 3, 2025
Upper · Passed
Amended on third consideration
upper
Jun 2, 2025
Upper · Passed
Re-reported as committed
upper
May 13, 2025
Committee
Re-referred to Appropriations
upper
May 6, 2025
Upper · Passed
Reported as committed
upper
Mar 6, 2025
Committee
Referred to Communications & Technology
upper
1 primary · 6 co-sponsors
Sponsors
Ask Maddy
·
AI policy assistant
Ask Maddy about SB 377
Scope: PA
Hi! I can help you understand SB 377. What would you like to know?
Try one of these
i
Maddy answers using official bill text and legislative records. Always verify before sharing.
Sources cited inline