HB3576 - 104th General Assembly (2025-2026)
WATER UTILITY CYBERSECURITY
Last Action
3/21/2025 - House: Rule 19(a) / Re-referred to Rules Committee
Statutes Amended In Order of Appearance
Synopsis As Introduced
Amends the Public Utilities Act. Provides that, within 120 days after the effective date of the amendatory provisions, each water purveyor shall develop a cybersecurity program that defines and implements organizational accountabilities and responsibilities for cyber risk management activities, and establishes policies, plans, processes, and procedures for identifying and mitigating cyber risk to its public community water system. Provides that, within certain time periods after the effective date of the amendatory provisions, a water purveyor shall create a cybersecurity incident reporting process; obtain a cybersecurity insurance policy that meets certain standards; reasonably conform to the most recent version of one or more of specified industry-recognized cybersecurity frameworks; submit a compliance report; submit an incident report; and submit an annual status report. Sets forth provisions concerning violations of the amendatory provisions and rulemaking abilities of the Department of Natural Resources and the Illinois Commerce Commission. Makes other changes.
Actions
| Date | Chamber | Action |
|---|---|---|
| 2/07/2025 | House | Filed with the Clerk by Rep. Dagmara Avelar |
| 2/18/2025 | House | First Reading |
| 2/18/2025 | House | Referred to Rules Committee |
| 3/11/2025 | House | Assigned to Cybersecurity, Data Analytics, & IT Committee |
| 3/21/2025 | House | Rule 19(a) / Re-referred to Rules Committee |