Bill Text: IL HB3158 | 2017-2018 | 100th General Assembly | Introduced

---

Bill Title: Amends the Public Utilities Act. Requires public water utilities operating in this State to file annually to the Illinois commerce Commission a report analyzing the risk and vulnerability of the State's water supply to cyber attack. Specifies the information to be provided in the report. Requires the reports to be submitted to the Commission by April 1 of each year, and for the Commission to post the reports on its publicly accessible website. Allows the Commission to adopt rules to implement the applicable requirements. Effective immediately.

Sponsorship: Partisan Bill (Democrat 1)

Status: (Failed) 2019-01-08 - Session Sine Die [HB3158 Detail]

Download: Illinois-2017-HB3158-Introduced.html

---

100TH GENERAL ASSEMBLY State of Illinois 2017 and 2018 HB3158 Introduced , by Rep. Sonya M. Harper SYNOPSIS AS INTRODUCED:
220 ILCS 5/5-113 new
Amends the Public Utilities Act. Requires public water utilities operating in this State to file annually to the Illinois commerce Commission a report analyzing the risk and vulnerability of the State's water supply to cyber attack. Specifies the information to be provided in the report. Requires the reports to be submitted to the Commission by April 1 of each year, and for the Commission to post the reports on its publicly accessible website. Allows the Commission to adopt rules to implement the applicable requirements. Effective immediately.
LRB100 09734 RJF 19903 b
FISCAL NOTE ACT MAY APPLY
A BILL FOR
HB3158 LRB100 09734 RJF 19903 b
AN ACT concerning regulation.
Be it enacted by the People of the State of Illinois,
represented in the General Assembly:
Section 5. The Public Utilities Act is amended by adding
Section 5-113 as follows:
(220 ILCS 5/5-113 new)
Sec. 5-113. Water supplier cyber security report.
(a) Public water utilities operating in this State shall
file annually to the Commission a report analyzing the risk and
vulnerability of the State's water supply to cyber attack. Each
report shall include, but not be limited to, the following
information:
(1) a proposed emergency plan in case of a cyber attack
on the State's water supply;
(2) a plan to sustain protection of public health and
the environment;
(3) a risk assessment and plan to reduce such risk of a
cyber attack;
(4) a plan to maintain a resilient infrastructure in
case of a cyber attack;
(5) ideas concerning development of cyber security
resources, including increasing public education and
awareness of cyber security efforts and fostering

HB3158 - 2 - LRB100 09734 RJF 19903 b
communication with the public concerning cyber security
issues;
(6) any other information concerning the State's water
supply and cyber security that a public water utility may
deem necessary or relevant.
(b) Reports required under this Section shall be submitted
to the Commission beginning April 1, 2018, and by April 1 of
each year thereafter. Following the submission of a water
utility's initial report, subsequent reports by the utility
shall state year-over-year changes in the information being
reported. The Commission shall post the reports on the public
portion of its website.
(c) The Commission may adopt rules to implement the
requirements of this Section.
Section 99. Effective date. This Act takes effect upon
becoming law.