Bill > HB0019

This bill addresses security requirements for community water systems by establishing new emergency response plan mandates and cybersecurity protocols. The legislation requires water systems serving populations of 3,300 or more to complete an emergency response plan by December 31, 2026, and smaller systems by July 1, 2027, with annual reporting to state authorities. The emergency response plans must include specific security measures such as regularly updating software, maintaining network protections, implementing secure authentication practices, providing annual cybersecurity training to employees with system access, conducting internal security vulnerability assessments, and establishing protocols for employee system access and data management. Water systems must also report any security breaches within two hours to the Utah Cyber Center, which will then notify state authorities. The bill further requires the state division to submit an annual report to legislative committees detailing security incidents and recommending potential legislative actions. Additionally, the bill amends existing records protection statutes to include emergency response plan and incident report information as protected records. The new requirements aim to enhance the physical and electronic security of community water systems and protect critical infrastructure from potential cyber threats.

Agriculture and Natural Resources

https://le.utah.gov/~2026/bills/static/HB0019.html