Illinois · House Bill 3576 · 104th General Assembly

WATER UTILITY CYBERSECURITY

HB 3576 Sponsored by Dagmara Avelar In committee

  1. Introduced Feb 7, 2025
  2. In committee Feb 18, 2025
  3. Passed the House Next
  4. Passed the Senate  
  5. To the governor  
  6. Became law  

What it does

The legislature's own summary of the bill, or its official long title.

Amends the Public Utilities Act. Provides that, within 120 days after the effective date of the amendatory provisions, each water purveyor shall develop a cybersecurity program that defines and implements organizational accountabilities and responsibilities for cyber risk management activities, and establishes policies, plans, processes, and procedures for identifying and mitigating cyber risk to its public…

Read the full title (147 words)

Amends the Public Utilities Act. Provides that, within 120 days after the effective date of the amendatory provisions, each water purveyor shall develop a cybersecurity program that defines and implements organizational accountabilities and responsibilities for cyber risk management activities, and establishes policies, plans, processes, and procedures for identifying and mitigating cyber risk to its public community water system. Provides that, within certain time periods after the effective date of the amendatory provisions, a water purveyor shall create a cybersecurity incident reporting process; obtain a cybersecurity insurance policy that meets certain standards; reasonably conform to the most recent version of one or more of specified industry-recognized cybersecurity frameworks; submit a compliance report; submit an incident report; and submit an annual status report. Sets forth provisions concerning violations of the amendatory provisions and rulemaking abilities of the Department of Natural Resources and the Illinois Commerce Commission. Makes other changes.

Every action

9 steps, oldest first, as the legislature records them.

  1. HouseFiled with the Clerk by Rep. Dagmara Avelar
  2. HouseFirst Reading
  3. CommitteeReferred to Rules Committee · House Rules
  4. CommitteeAssigned to Cybersecurity, Data Analytics, & IT Committee · House Cybersecurity, Data Analytics, & IT
  5. CommitteeRule 19(a) / Re-referred to Rules Committee · House Rules
  6. CommitteeAssigned to Cybersecurity, Data Analytics, & IT Committee · House Cybersecurity, Data Analytics, & IT
  7. HouseAdded Co-Sponsor Rep. Kimberly Du Buclet
  8. HouseAdded Co-Sponsor Rep. Michael Crawford
  9. CommitteeRule 19(a) / Re-referred to Rules Committee · House Rules

Roll calls

No recorded votes on this bill yet.

Sponsors

The member who introduced it, joined by 2 cosponsors: 2 Democrats.

All 2 cosponsors

From Illinois's official records (www.ilga.gov), checked Nov 13, 2026. Text links go to the official versions; LegiList does not copy bill text.