SB 377 Pennsylvania Senate · 2025-2026 Regular Session

An Act amending Title 62 (Procurement) of the Pennsylvania Consolidated Statutes, in contracts for public works, providing for contracts for information technology commodities and services.

SB 377 requires Pennsylvania state agencies to purchase information technology devices (like computers or tablets) that meet specific security standards when entering new public works contracts. It mandates that these devices, services, and solutions must be configurable, secure, and maintainable according to National Institute of Standards and Technology (NIST) guidelines or widely adopted industry security practices. The law applies only to contracts signed on or after its effective date (60 days after passage), affecting state agencies buying endpoint devices for public projects. This policy change directly impacts procurement decisions for IT hardware and services across Pennsylvania government operations.
Bill status passed 4 of 5 stages cleared
Introduction
Mar 2025
Committee Review
Oct 2025
Senate Passage
Jun 2025
House Passage
Oct 2025
Governor
Introduced Mar 6, 2025 Last action Oct 7, 2025
Maddy AI version diff · 1 comparison

What changed between versions

Printer's No. PN0323 Printer's No. PN0865 · 2 edits
MINOR
The bill text was updated from the March version to the June amended version, reflecting changes made during the legislative process. The most significant substantive change is a modification to the security requirements for endpoint devices, shifting from a strict mandate to follow specific NIST guidelines to a more flexible standard that allows for widely adopted certifications or industry best practices if they are applicable.
Scope change
The bill's scope regarding security standards was broadened to allow for alternative compliance methods (industry best practices or other certifications) rather than strictly requiring NIST guidelines.
REQUIREMENT

The requirement for endpoint device security was changed from mandating NIST Special Publication 800-series guidelines to allowing compliance via NIST guidelines, widely adopted certifications, or industry best practices, depending on what is applicable.

TECHNICAL

The bill header and printer numbers were updated to reflect the amended version (PN 0865) and the date of third-reading consideration (June 3, 2025).

Floor votes · Senate Jun 4, 2025 · House Oct 7, 2025

How they voted

490
Passed · 1 other
Total votes 50
Jun 4, 2025
D Democratic23
22 Yea 1
95% Yea
R Republican27
27 Yea
100% Yea
Vote distribution
All Yea All Nay Mixed No data
Full legislative history

Actions timeline

Total actions
14
Key actions
6
Committee
6
Amendments
1
Oct 7, 2025
House · Passed
House Vote: pass (26-0)
house
Oct 7, 2025
Lower · Passed
Reported as committed
lower
Jun 5, 2025
Committee
Referred to Communications & Technology
lower
Jun 4, 2025
Upper · Passed
Third consideration and final passage
upper
Jun 3, 2025
Upper · Passed
Amended on third consideration
upper
Jun 2, 2025
Upper · Passed
Re-reported as committed
upper
May 13, 2025
Committee
Re-referred to Appropriations
upper
May 6, 2025
Upper · Passed
Reported as committed
upper
Mar 6, 2025
Committee
Referred to Communications & Technology
upper
1 primary · 6 co-sponsors

Sponsors