IL HB3158

Requires public water utilities operating in Illinois to file annual cyber security reports with the Illinois Commerce Commission analyzing risks and vulnerabilities of the state's water supply to cyber attacks.

Reports must include emergency response plans, public health protection plans, risk assessments, infrastructure resilience plans, cyber security education initiatives, and other relevant information.

First reports are due April 1, 2018, with subsequent reports due April 1 of each year; subsequent reports must identify year-over-year changes from prior reports.

The Commission must post all submitted reports on its publicly accessible website.

The Commission may adopt rules to implement reporting requirements; the Act takes effect immediately upon becoming law.