Amends TCA Title 4; Title 7; Title 47, Chapter 18; Title 64; Title 65; Title 67 and Title 68.

ON MARCH 28, 2022, THE SENATE ADOPTED AMENDMENT #1 AND PASSED SENATE BILL 2282, AS AMENDED. AMENDMENT #1 rewrites this bill to require certain utilities to prepare and implement a cyber security plan to provide for the protection of the utility's facilities from unauthorized use, alteration, ransom, or destruction of electronic data. The initial plan must be implemented by the later of July 1, 2023, or one year from the date that the utility is formed. This amendment requires utilities to assess and update the cyber security plan every two years to address new threats. The utilities to which these provisions apply are: entities subject to the jurisdiction of the water and wastewater financing board; entities subject to the jurisdiction of the utility management review board; rural electric membership cooperatives; and county-owned or municipal-owned utilities that provide electric, natural gas, or propane services to the public. This amendment requires the comptroller of the treasury to: (1) Verify that a utility has implemented a cyber security plan in accordance with this amendment; (2) Enforce the provisions of this amendment; (3) Submit a report to the chair of the commerce committee of the house of representatives, the chair of the commerce and labor committee of the senate, the department of safety, and the legislative librarian on the first Monday of February each year regarding compliance with this amendment; and (4) When applicable, report a noncompliant utility to the applicable regulatory board for consideration of sanctions, or, if no such board applies, impose sanctions directly. This amendment also requires public utilities that provide electric, water, wastewater, or natural gas services to prepare and implement a cyber security plan, subject to the same deadlines and update requirements as described above with the only significant difference being that the Tennessee public utilities commission (instead of the comptroller) will exercise the verification, enforcement, and reporting responsibilities.