Bill > HB0019

This bill amends existing Utah law to enhance security at drinking water facilities by requiring community water systems to develop and maintain emergency response plans, which must include measures like regular software updates for control systems, network protection, secure authentication, annual cybersecurity training for employees with access to operational technology, and prompt removal of access for terminated employees. These plans must also address manual operation capabilities, reporting security breaches within two hours to the Utah Cyber Center, and complying with any security directives from the director of the Division of Water Quality. The bill also clarifies that records related to these emergency response plans and incident reports for drinking water facilities are protected from public disclosure, alongside existing protections for engineering drawings and security tools. Furthermore, the director of the Division of Water Quality is tasked with providing information and technical resources to help community water systems create these plans, and the division will report annually to legislative committees on the security of these systems.

Agriculture and Natural Resources

https://le.utah.gov/~2026/bills/static/HB0019.html