The civic record
Read. Follow. Verify.Utah requires community water systems to complete emergency response plans and report security breaches
Last action · February 27, 2026: Governor SignedSponsors: Colin Jack and 1 other
Track this bill to get notified when it advances a stage. One tap to stop, anytime.
What This Bill Does
Utah enacts HB 19 to require s to complete comprehensive emergency response plans and report any security breaches to the Utah Cyber Center within two hours of discovery. Large water systems serving populations of 3,300 or greater must complete their plans by December 31, 2026, while smaller systems have until July 1, 2027. The measure also mandates annual legislative reporting on water facility security and classifies emergency response plans as s.
Local water utilities face new mandates to implement cybersecurity controls, conduct vulnerability assessments, and establish rapid incident reporting protocols. For residents, these requirements shape the operational safety and electronic security of public drinking water infrastructure.
Who It Affects
Groups the bill's text affects, as described in the record. Being affected is not a position for or against it.
Community water systems
Community water systems must complete emergency response plans, implement cybersecurity and vulnerability controls, report security breaches within two hours, and submit annual compliance status to the division.
Utah Cyber Center
The Utah Cyber Center receives security breach reports from water suppliers and must notify the Division of Drinking Water within one day.
Division of Drinking Water
The division must track emergency response plan compliance, provide technical resources, and submit an annual security report to legislative committees.
Key Facts
You don't have to trust us. Each fact below is taken straight from the official document - click any one to see the exact passage, highlighted in the original.
Frequently Asked Questions
When do community water systems have to complete their emergency response plans?
How quickly must a security breach be reported?
Are water utility emergency response plans public documents?
What else do you want to know?
News Coverage
Follow the record
Votes, people, money & the original sourceWhere This Stands
Current status: Signed into law.
Procedural history
36 actions- Feb 27, 2026Lieutenant Governor's office for filingEnrolledGovernor Signed
- Feb 24, 2026HouseHouse/ to Governor
- Feb 24, 2026HouseHouse/ received enrolled bill from Printing
- Feb 20, 2026HouseHouse/ enrolled bill to Printing
- Feb 20, 2026Clerk of the HouseEnrolled Bill Returned to House or Senate
- Feb 9, 2026Legislative Research and General Counsel / EnrollingDraft of Enrolled Bill Prepared
Show 30 earlier actions
- Feb 9, 2026Legislative Research and General Counsel / EnrollingBill Received from House for Enrolling
- Feb 5, 2026HouseHouse/ signed by Speaker/ sent for enrolling
- Feb 5, 2026HouseHouse/ received from Senate
- Feb 5, 2026SenateSenate/ to House
- Feb 5, 2026SenateSenate/ signed by President/ returned to House
- Feb 5, 2026SenateFloorSenate/ passed 3rd reading
- Feb 5, 2026SenateSenate/ 3rd reading
- Feb 4, 2026SenateFloorSenate/ passed 2nd reading
- Feb 4, 2026SenateSenate/ 2nd reading
- Jan 29, 2026SenateSenate/ placed on 2nd Reading Calendar
- Jan 29, 2026SenateSenate/ committee report favorable
- Jan 27, 2026SenateSenate Comm - Favorable Recommendation
- Jan 23, 2026SenateCommitteeSenate/ to standing committee
- Jan 21, 2026SenateIntroducedSenate/ 1st reading (Introduced)
- Jan 20, 2026SenateSenate/ received from House
- Jan 20, 2026HouseHouse/ to Senate
- Jan 20, 2026HouseFloorHouse/ passed 3rd reading
- Jan 20, 2026HouseHouse/ 3rd reading
- Jan 20, 2026HouseHouse/ 2nd reading
- Jan 20, 2026HouseHouse/ Rules to 3rd Reading Calendar
- Jan 20, 2026HouseIntroducedHouse/ 1st reading (Introduced)
- Jan 14, 2026HouseHouse/ received fiscal note from Fiscal Analyst
- Jan 14, 2026HouseHouse/ received bill from Legislative Research
- Jan 9, 2026ReleasedLFA/ fiscal note publicly available for HB0019
- Jan 8, 2026Version SponsorLFA/ fiscal note sent to sponsor for HB0019
- Dec 4, 2025Legislative Research and General CounselNumbered Bill Publicly Distributed
- Dec 4, 2025Legislative Research and General CounselBill Numbered but not Distributed
- Oct 14, 2025Version SponsorLFA/ fiscal note sent to sponsor for HB0019
- Sep 18, 2025Legislative Fiscal AgencyLFA/ bill sent to agencies for fiscal input for HB0019
- Sep 18, 2025Legislative Fiscal AnalystLFA/ bill assigned to staff for fiscal analysis for HB0019
Version history
Only one version on file - nothing to compare yet. As later stages (committee substitute, engrossed, enrolled) are captured, the redline appears here.
View official text →Lobbying Activity
No state lobbying filings in our records match this bill. Federal lobbying reports (LDA) cover Congress, so they are not listed on state bills.
Full breakdown
Who this bill affects and the strongest case for and against it, written only from the bill’s own text.
Sponsors
Discoveries
Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.
Mandatory Cyber Incident Reporting
The bill establishes a strict two-hour window for community water systems to report security breaches to the Utah Cyber Center.
Connected Entities
Sources
le.utah.gov
Analysis Score
0–100- Significance75How much this matters to a regular citizen
- Controversy15Intensity of disagreement among stakeholders
- Entertainment5Compellingness for a non-policy-wonk reader
- Buzz30Current news / social attention level
Publisher tools