This bill creates a new Water Risk and Resilience Organization (WRRO) to develop cybersecurity standards for the nation's water systems. The EPA Administrator would certify one organization to establish and enforce cybersecurity requirements for community water systems and wastewater treatment facilities serving 3,300 or more people. The WRRO must demonstrate expertise in water system operations, maintain independence from water utilities, establish fair procedures for compliance enforcement, and keep sensitive security information confidential. Water systems that violate approved cybersecurity requirements could face penalties up to $25,000 per day, though the EPA retains authority to review these penalties. The bill authorizes $5 million in funding for fiscal years 2024 and 2025, and requires the EPA to issue final regulations within 270 days of enactment. States retain authority to implement their own water safety measures as long as they don't conflict with the federal cybersecurity standards.
Take Action
Your position
Add a comment
to comment on this bill.
Annotate the text
Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.