CA SB1218

Requires the Public Utilities Commission to adopt inspection, detection, response, and replacement standards and rules addressing cybersecurity risks to transmission and distribution systems of electrical corporations, electrical cooperatives, and gas corporations.

Mandates electrical corporations, electrical cooperatives, and gas corporations to report annually on compliance with cybersecurity standards, with reports made available to the public unless the commission determines disclosure would pose a security threat.

Requires the commission to conduct reviews after every major service outage or data breach to determine compliance with cybersecurity standards and authorizes penalties including rate reductions or monetary fines for non-compliance.

Requires local publicly owned electric and gas utilities to construct and operate systems to minimize cybersecurity risks, annually prepare cybersecurity plans for governing board review, and may contract with independent evaluators to assess plan comprehensiveness.

Authorizes governing boards of local utilities to withhold from public disclosure information that would pose a security threat, consistent with the Government Code's closed session provisions.