S.B. No. 1625 amends the Health and Safety Code to enhance the reporting requirements for public water systems regarding security incidents. The bill mandates that owners or operators of public water supply and wastewater systems maintain internal procedures to immediately notify the Texas Commission on Environmental Quality (TCEQ) of specific events that could impact the safety and adequacy of drinking water. These events include unauthorized entries, acts of terrorism, natural disasters, and unplanned conditions leading to public water supply outages. Notably, the bill introduces new categories of security incidents that must be reported, such as unauthorized disclosures of sensitive personal information, ransomware attacks, and disruptions to computer systems.

Additionally, the bill requires the TCEQ to establish procedures for reporting these security incidents to the Department of Information Resources. It clarifies that the notification requirements do not obligate nonindustrial public water supply systems to report weather alerts or warnings issued by relevant agencies. The changes aim to improve the security and response protocols of public water systems, ensuring better protection of public health and safety. The act is set to take effect on September 1, 2025.

Statutes affected:
Introduced: Health and Safety Code 341.033 (Health and Safety Code 341)
Senate Committee Report: Health and Safety Code 341.033 (Health and Safety Code 341)
Engrossed: Health and Safety Code 341.033 (Health and Safety Code 341)
House Committee Report: Health and Safety Code 341.033 (Health and Safety Code 341)