Technology

SB 377 requires Pennsylvania state agencies to purchase information technology devices (like computers or tablets) that meet specific security standards when entering new public works contracts. It mandates that these devices, services, and solutions must be configurable, secure, and maintainable according to National Institute of Standards and Technology (NIST) guidelines or widely adopted industry security practices. The law applies only to contracts signed on or after its effective date (60 days after passage), affecting state agencies buying endpoint devices for public projects. This policy change directly impacts procurement decisions for IT hardware and services across Pennsylvania government operations.

SB 245 establishes Pennsylvania's Regulatory Sandbox Program, allowing businesses to temporarily test innovative products and services - such as those using blockchain technology - in regulated sectors like finance and insurance without full compliance with certain state laws. The program is administered by the new Regulatory Relief Office (within the Governor's Office), which reviews applications and works with agencies to waive or suspend relevant regulations for approved participants. An advisory committee, including business representatives and legislators, provides input and can override agency rejections of applications. This directly affects businesses developing new offerings who seek a controlled environment to demonstrate innovations before full market rollout.

SB 812 amends Pennsylvania's Election Code to strengthen oversight of electronic voting systems. It requires the Secretary of the Commonwealth to review these systems for security, functionality, and accessibility, including publicly demonstrating them 30 days before approval. Counties must report voting system malfunctions (e.g., ballot delays or tabulation issues) to the state within 60 days of elections, detailing causes and impacts. The bill also mandates that all review reports and public demonstration recordings be posted on the state’s website for public access.

Pennsylvania's SB 649 (now Act No. 35 of 2025) creates a new criminal offense for "digital forgery," targeting individuals who create and distribute fake digital images or audio recordings of real people without consent, intending to defraud or cause harm. It defines a "forged digital likeness" as a computer-generated representation that materially changes a person's appearance, speech, or behavior to deceive others, with penalties ranging from a misdemeanor to a felony for fraud schemes. The law explicitly excludes satire, political commentary, law enforcement activities, and technology providers from prosecution, and allows a defense if the creator clearly disclosed the content as fake. This law directly affects creators of deceptive digital content and aims to protect individuals from identity-based fraud or harm.