N.Y.C. Admin. Code § 23-805: § 23-805 Website encryption.

Every website maintained by or on behalf of the city or a city agency shall encrypt all exchanges and transfers between a web server, maintained by or on behalf of the city or a city agency, and a web browser: (i) of hypertext; or (ii) of electronic information, and require web browsers to request such encrypted exchange or transfer at all times for such websites, provided that such encryption shall not be required if such exchanges or transfers are conducted in a manner that provides at least an equivalent level of confidentiality, data integrity and authentication.

(L.L. 2020/079, 8/28/2020, eff. 2/28/2020)