Sign inStart free

New York regulations

9 NYCRR 5319.14

Executive Department

Browse New York regulations by title, part, and section.

Control program requirements

You’re browsing Title 9 — free.

Read the source-transparency report →Create a free account (no card) to open all 23 titles →

Control program requirements

Compiled text through Nov 15, 2021

Register checked through Jul 29, 2026

Later Register activity found — review the notice before relying on the compiled text.

Dates and status
Compiling agency
Executive Department
Text status
Source receipt
Compiled text through
Nov 15, 2021
Register checked through
July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
Activity status
Later Register activity found — review the notice before relying on the compiled text.
Latest notice
TAF-46-21-00009-P · Proposed rule · Nov 17, 2021
Source snapshot
Jun 6, 2026
(a)Control program verification.
(1)EPROM-based program storage. Gaming devices that have control programs residing in one or more EPROMs shall employ a mechanism to verify control programs and data. Such mechanism shall use, at a minimum, a checksum. It is recommended that a cyclic redundancy check be used (at least 16-bit).
(2)Non-EPROM program storage.
(i)Software shall provide a mechanism for the detection of unauthorized and corrupt software elements, upon any access, and subsequently prevent the execution or usage of such corrupt elements by a gaming device. Such mechanism shall employ a hashing algorithm that produces a message digest output of at least 128 bits.
(ii)In the event of a failed authentication after a game has been powered up, a gaming device immediately should enter an error condition and display an appropriate error. This error shall require operator intervention to clear and shall not clear until the data authenticates properly, following operator intervention, or the media are replaced or corrected, and the gaming device’s memory is cleared. Control program verification mechanisms will be evaluated on a case-by-case basis based on industry-standard security practices.
(3)Alterable media. In addition to the requirements set forth in paragraph (2) of this subdivision shall:
(i)employ a mechanism that tests unused or unallocated areas of the alterable media for unintended programs or data and tests the structure of the media for integrity. Such mechanism shall prevent further play of the gaming device if unexpected data or structural inconsistencies are found; and
(ii)employ a mechanism for keeping a record any time a control program component is added, removed or altered on any alterable media. Such record shall contain a minimum of the last 10 modifications to the media and each record shall contain the date and time of the action, identification of the component affected, the reason for the modification and any pertinent validation information. Alterable program storage does not include memory devices typically considered to be alterable that have been rendered “read-only” by either a hardware or software means.
(b)Program identification.

Program storage devices that do not have the ability to be modified while installed in a gaming device during normal operation shall be marked clearly with sufficient information to identify the software and revision level of the information stored in such devices.

(c)Independent control program verification.

A gaming device shall have the ability to allow for an independent integrity check of such device’s software from an outside source. An independent integrity check is required for all control programs that may affect the integrity of the game. In such integrity check, the software shall be authenticated by a third-party device, which may be embedded within the game software, by having an interface port for a third-party device to authenticate the media, or by allowing for removal of the media such that the media can be verified externally. This integrity check shall provide a means for field verification of the software to identify and validate the program. An approved testing laboratory shall, prior to device approval, evaluate the integrity-check method. If the authentication program is contained within the game software, the manufacturer shall receive written approval from the testing laboratory prior to submission for testing.

State Register activity

2 rulemakings · 3 notices

  1. Fuel use tax on motor fuel and diesel motor fuel and the art. 13-A carrier tax jointly administered therewith.

    TAF-46-21-00009Department of Taxation and FinancePart-level action

    The Register recorded this action against the whole Part, which includes this section (9 NYCRR Part 5319).

    1. Proposed ruleTAF-46-21-00009-P

      Amendment of section 492.1(b)(1) of Title 20 NYCRR.

      Register Nov 17, 2021

      Register PDF, pp. 38–104

  2. To set forth the standards for the gaming devices.

    SGC-37-16-00021State Gaming CommissionPart-level action

    The Register recorded this action against the whole Part, which includes this section (9 NYCRR Part 5319).

    1. Adopted ruleSGC-37-16-00021-A

      Addition of Part 5319 to Title 9 NYCRR.

      Register Nov 16, 2016 · Filed Nov 1, 2016 · Effective Nov 16, 2016

      Register PDF, p. 34

    2. Proposed ruleSGC-37-16-00021-P

      Set forth the standards for the gaming devices.

      Addition of Part 5319 to Title 9 NYCRR.

      Register Sep 14, 2016

      Register PDF, pp. 15–16

Register checked through July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)

State Register notices matched to this citation. This is Register status evidence, not compiled regulation text: a notice does not by itself amend the text shown here.

LawEngine organizes New York regulations for fast review. Use independent legal judgment before filing.