New York's governor is taking on AI, age checks, 3D printed guns, and data centers at once, and each move is already facing a test.
When Cody Wilson heard that New York had moved to ban 3D-printed gun parts, he did not file a lawsuit. He renamed his workaround.
Wilson runs the largest archive of 3D-printable firearm files online. Under New York's new ghost-gun law, which makes it illegal to print designated gun parts, Wilson has begun altering the files themselves in a process he calls "Hochulization," arguing that a sufficiently modified blueprint is no longer the banned part. Governor Kathy Hochul, in a recent interview on The Verge's Decoder podcast, pushed back: the law covers the function, not the file's exact geometry.
The exchange is the cleanest current test of a question Hochul is taking on across roughly half a dozen tech fights at once: whether state-level rules have technical grip, or only rhetorical grip.
Hochul is not a tech-policy specialist by background. She is a sitting governor in an election year who has chosen to lead on data centers, AI, age verification, surveillance cameras, and untraceable firearms in the same news cycle. The Verge interview is less a manifesto than a portfolio of positions, each one running into a different kind of friction.
Take the data centers. In July, Hochul signed a one-year construction pause on new facilities, framed around what would make them "a workable proposition" for the state. The pause buys time to address power, water, and grid costs. It also creates a clock with no published lift criteria. There is no threshold for grid capacity, water-use limits, or local benefit agreements that would let a project break ground again. The moratorium's exit is a policy choice the administration has not yet defined.
The age-verification regime is a different kind of friction. The final SAFE for Kids Act rules, released jointly by Hochul and Attorney General Letitia James, require platforms accessible to minors in New York to verify users' ages. The mechanics, covered in The Verge's policy reporting, Inside Privacy, and WXXI News, mean adults will also have to show ID to use large parts of the internet. Practical anonymity online ends when the rule takes effect in January. The full rule text sets the verification requirement. First Amendment groups have already flagged the verification step as a speech burden; the rule's viability will likely turn on how narrowly age checks are scoped and whether the state can keep the data out of the platforms' hands.
The AI posture is, by Hochul's own account, simpler: she wants AI to be "less evil." The phrase is colorful and not very specific. The substantive content is that New York is not waiting on federal action, and that Hochul sees AI governance as part of the governor's job. Whether that means algorithmic auditing requirements, compute-side rules, or something else is not yet on the record. The "less evil" line is a placeholder, not a policy.
Flock cameras, automated license-plate readers operated by a private vendor and increasingly used by local police, fall into a fourth bucket: the surveillance posture. The interview touched on them briefly, and the position is essentially that the state is comfortable with the network's continued use. That is also a place where the rule has not yet been written, only the disposition.
The through-line is the gap between the position and the tool. Hochul is taking positions the federal government has not, and the New York rulebook is filling in: a one-year construction pause, a final age-verification rule, a ghost-gun statute that bans a function. Each rule has a test. The Wilson exchange is the most legible test, because the workaround is named and the workaround is on the internet. The data center moratorium's test is whether the administration ever publishes a lift threshold before the year runs out. The age-verification rule's test is whether courts and platforms accept the regime without narrowing it past usefulness.
The questions worth watching are two. First, does the ghost-gun law survive contact with a file that has been deliberately altered past the statute's words, and does Hochul's office argue that function, not form, is what the law covers? Second, what does "workable" mean for a New York data center in 2027, and who decides? Both questions will be answered in court filings, in administrative rulemaking, and in budget memos before either gets a clean press conference.
Hochul's tech year is not a single agenda. It is six overlapping positions, each with its own friction, and the friction is the story.