Drinking Water Utilities Amendments
What changed between versions
Requires community water systems to complete an emergency response plan by December 31, 2026 (for larger systems) or July 1, 2027 (for smaller systems).
Mandates that suppliers report any security breach to the Utah Cyber Center within two hours of discovery.
Requires emergency response plans to include specific cybersecurity measures like software updates, network protection, and annual employee training.
Defines critical terms including 'operational technology,' 'control system,' and 'security breach' to clarify what systems and incidents are covered.
Requires the Division of Drinking Water to submit annual reports on water system security to two legislative committees.
Amends the Utah Public Records Act to classify drinking water facility security plans, engineering drawings, and incident reports as protected records.
