Information Security Compliance for Data Handling

The contract requires strict adherence to New York State cybersecurity regulations for all digital systems managing EEO, fuel test, and subcontractor data, specifically mandating compliance with GBL §899-aa and ST Tech Law §208. These provisions impose obligations related to data protection, access controls, breach notification, and secure handling practices to safeguard sensitive information against unauthorized access, disclosure, or compromise. The subcontractor must implement and maintain robust security measures that align with state legal requirements, ensuring continuous compliance throughout the system’s lifecycle. This opportunity is classified as a subcontract under NAICS code 541512, with a submission deadline of July 22, 2026, and was posted on June 30, 2026. The contracting entity is Centro, operating under the New York agency designation, and the place of performance is not explicitly defined, suggesting potential remote or distributed operations. Participation requires documented evidence of compliance capabilities, incident response protocols, and evidence of secure data handling practices tailored to the types of data involved. All systems must be configured and monitored to meet NYS standards without exception, and failure to comply may result in contract termination or legal liability.