United States 118th Congress Status: Died 1 R cosponsors

HR 1148 — Critical Electric Infrastructure Cybersecurity Incident Reporting Act

Last action — Referred to the Subcommittee on Energy, Climate and Grid Security.

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. ✓
    Introduced
  2. ✓
    In Committee
  3. Died in session

This bill died with 118th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.

This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.

Summary

To direct the Secretary of Energy to promulgate regulations to facilitate the timely submission of notifications regarding cybersecurity incidents and potential cybersecurity incidents with respect to critical electric infrastructure, and for other purposes.

Bill Text

Sections of law this bill changes

1 section in 1 law

From the bill's own amending language, matched to the official United States Code (current through Public Law 119-124).

Federal regulation and development of power · 16 U.S.C. ch. 12 1 section
  • § 824o-1 Critical electric infrastructure security Amends

    16 U.S.C. § 824o-1

    The law today

    (a) Definitions For purposes of this section: (1) Bulk-power system; Electric Reliability Organization; regional entity The terms “bulk-power system”, “Electric Reliability Organization”, and “regional entity” have the meanings given such terms in paragraphs (1), (2), and (7) of section 824o(a) of this title, respectively. (2) Critical electric infrastructure The term “critical electric infrastructure” means a system or asset of the bulk-power system, whether physical or virtual, the incapacity or destruction of which would negatively affect national security, economic security, public health or safety, or any combination of such matters. (3) Critical electric infrastructure information The term “critical electric infrastructure information” means information related to critical electric infrastructure, or proposed critical electrical infrastructure, generated by or provided to the Commission or other Federal agency, other than classified national security information, that is designated as critical electric infrastructure information by the Commission or the Secretary pursuant to subsection (d). Such term includes information that qualifies as critical energy infrastructure information under the Commission’s regulations. (4) Defense critical electric infrastructure The term “defense critical electric infrastructure” means any electric infrastructure located in any of the 48 contiguous States or the District of Columbia that serves a facility designated by the Secretary pursuant to subsection (c), but is not owned or operated by the owner or operator of such facility. (5) Electromagnetic pulse The term “electromagnetic pulse” means 1 or more pulses of electromagnetic energy emitted by a device capable of disabling or disrupting operation of, or destroying, electronic devices or communications networks, including hardware, software, and data, by means of such a pulse. (6) Geomagnetic storm The term “geomagnetic storm” means a temporary disturbance of the Earth’s magnetic field resulting from solar activity. (7) Grid security emergency The term “grid security emergency” means the occurrence or imminent danger of— (A) (i) a malicious act using electronic communication or an electromagnetic pulse, or a geomagnetic storm event, that could disrupt the operation of those electronic devices or communications networks, including hardware, software, and data, that are essential to the reliability of critical electric infrastructure or of defense critical electric infrastructure; and (ii) disruption of the operation of such devices or networks, with significant adverse effects on the reliability of critical electric infrastructure or of defense critical electric infrastructure, as a result of such act or event; or (B) (i) a direct physical attack on critical electric infrastructure or on defense critical electric infrastructure; and (ii) significant adverse effects on the reliability of critical electric infrastructure or of defense critical electric infrastructure as a result of such physical attack. (8) Secretary The term “Secretary” means the Secretary of Energy. (b) Authority to address grid security emergency (1) Authority Whenever the President issues and provides to the Secretary a written directive or determination identifying a grid security emergency, the Secretary may, with or without notice, hearing, or report, issue such orders for emergency measures as are necessary in the judgment of the Secretary to protect or restore the reliability of critical electric infrastructure or of defense critical electric infrastructure during such emergency. As soon as practicable but not later than 180 days after December 4, 2015, the Secretary shall, after notice and opportunity for comment, establish rules of procedure that ensure that such authority can be exercised expeditiously. (2) Notification of Congress Whenever the President issues and provides to the Secretary a written directive or determination under paragraph (1), the Presid...

    4 other bills also change this section · Follow it → Official text at uscode.house.gov ↗

How this bill changes current law

4 changes Share ↗

Compared against current U.S. Code AI-generated reading aid — verify against the official bill.

The bill establishes a framework for timely reporting of cybersecurity incidents related to critical electric infrastructure and designates the Department of Energy as the agency to receive such notifications.

  • 16 U.S.C. 824o-1

    (e) Cybersecurity Incident Reporting.-- (1) Designation.--The Department of Energy shall be a designated agency within the Federal Government to receive notifications regarding cybersecurity incidents and potential cybersecurity incidents with respect to critical electric infrastructure from other Federal agencies and owners, operators, and users of critical electric infrastructure. (2) Regulations.-- (A) In general.--Not later than 240 days after the date of enactment of the Critical Electric Infrastructure Cybersecurity Incident Reporting Act, the Secretary shall promulgate regulations to facilitate the submission of timely, secure, and confidential notifications regarding cybersecurity incidents and potential cybersecurity incidents with respect to critical electric infrastructure from Federal agencies and owners, operators, and users of critical electric infrastructure. (B) Inclusions.--The regulations promulgated under subparagraph (A) shall-- (i) detail what constitutes a potential cybersecurity incident for purposes of this subsection; and (ii) require a Federal agency or an owner, operator, or user of critical electric infrastructure that discovers a cybersecurity incident or a potential cybersecurity incident with respect to critical electric infrastructure to submit to the Secretary, not later than 24 hours after discovery of such cybersecurity incident or potential cybersecurity incident, notification regarding such cybersecurity incident or potential cybersecurity incident. (3) Annual reports.--Not later than one year after the date of enactment of the Critical Electric Infrastructure Cybersecurity Incident Reporting Act, and annually thereafter, the Secretary shall submit to the Committee on Energy and Commerce of the House of Representatives and the Committee on Energy and Natural Resources of the Senate a report, in classified form if necessary, on the number of notifications received pursuant to this subsection, and a description of the actions taken by the Department of Energy regarding such notifications, during the 1-year period preceding the report.

    Establishes a reporting framework for cybersecurity incidents and requires the Secretary of Energy to create regulations for timely notifications.

  • 16 U.S.C. 824o-1

    The terms `bulk-power system', `cybersecurity incident', `Electric Reliability Organization', and `regional entity' have the meanings given such terms in paragraphs (1), (8), (2), and (7) of section 215(a), respectively. → (1) Bulk-power system; cybersecurity incident; electric reliability organization; regional entity.--The terms `bulk-power system', `cybersecurity incident', `Electric Reliability Organization', and `regional entity' have the meanings given such terms in paragraphs (1), (8), (2), and (7) of section 215(a), respectively.

    Clarifies the definitions of key terms within the context of the bill.

  • 16 U.S.C. 824o-1

    In paragraph (7)(A)(i), by inserting `, including a cybersecurity incident,' after `a malicious act';

    Expands the definition to explicitly include cybersecurity incidents within malicious acts.

  • 16 U.S.C. 824o-1

    subsections (e) and (f) → subsections (f) and (g)

    Reorganizes the subsections for clarity.

Action History

  1. Introduced in House

  2. Introduced in House

  3. Referred to the House Committee on Energy and Commerce.

  4. Referred to the Subcommittee on Energy, Climate and Grid Security.

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 546 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (546)

546 members have not signed on to this bill.

Show all 546 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

public-safety technology energy
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does HR 1148 do?
To direct the Secretary of Energy to promulgate regulations to facilitate the timely submission of notifications regarding cybersecurity incidents and potential cybersecurity incidents with respect to critical electric infrastructure, and for other purposes.
Who sponsors HR 1148?
HR 1148 is sponsored by Walberg, Tim (Republican).
What is the current status of HR 1148?
This bill died with 118th Congress. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
Where can I track HR 1148?
Track HR 1148 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on HR 1148

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of HR 1148

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →