Bill · H.R. 2594· House(119-HR-2594)
To establish a Water Risk and Resilience Organization to develop risk and resilience requirements for the water sector.
- Introduced
- 4/2/2025
- Last activity
- 4/2/2025 — Referred to the Committee on Transportation and Infrastructure, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
- Sponsored by
- Eric Crawford
- Cosponsors
- - 2 - 1
- Introduced
- In Committee
What this bill would do
This bill proposes the creation of a Water Risk and Resilience Organization (WRRO) to handle cybersecurity requirements for the water sector. The WRRO would be a certified organization tasked with developing risk and resilience standards for covered water systems. These systems include community water systems and treatment works serving populations of 3,300 or more. The Administrator of the EPA would oversee the certification of the WRRO and approve its proposed requirements. The organization would monitor compliance through assessments and annual self-attestations. Additionally, the WRRO would have the authority to impose penalties for failure to comply with approved standards.
Yes· 3 of 11
Does this better protect the country from computer attacks?+8
The bill directly aims to increase the cybersecurity resilience of critical water infrastructure.
Does this give the federal government more power?+5
The bill empowers the EPA Administrator to oversee the certification and regulatory requirements of the WRRO.
Does this give people more protection from unfair business practices?+5
Protecting water infrastructure security indirectly protects consumers from service disruptions.
The opposite
Would business owners be better off under this?-3
Water system operators face new compliance costs and potential significant penalties.
Who it would affect, and how
Potential Positive Impacts for People
-
Increased Security for Water Infrastructure: The bill aims to develop "cyber resilient" operations, which help water systems withstand, reduce, or recover from cybersecurity incidents that disrupt normal functions (Section 1(a)(3)).
-
Protection of Sensitive Information: The requirements for the WRRO include establishing measures to secure sensitive information and protect sensitive security information from public disclosure (Section 1(c)(2)(E)).
-
Standardized Compliance Oversight: The WRRO is required to conduct periodic assessments of water systems—at least every 5 years—and require annual self-attestations to ensure requirements are being met (Section 1(e)(1)).
-
Transparency and Due Process: The bill requires the WRRO to provide reasonable notice, opportunity for public comment, and due process when developing requirements or imposing penalties (Section 1(c)(2)(E)(iv)).
Potential Negative Impacts for People
-
Financial Burdens on Water Systems and Users: The WRRO is required to allocate dues, fees, and other charges among end-users to fund its activities (Section 1(c)(2)(E)(ii)).
-
Risk of Financial Penalties: Owners or operators of covered water systems may face penalties of up to $25,000 per day for violating cybersecurity risk and resilience requirements (Section 1(f)(4)(A)).
-
Regulatory Compliance Requirements: Covered water systems must comply with specific cybersecurity risk and resilience requirements, which include following implementation plans and schedules provided by the WRRO (Section 1(d)(1)).
Groups and Interests Ranking
Every group the model scored this bill for, from -10 to +10. Hover a score for the reason it gave.
- Governance And Ideology
- Increases Federal Power+5Improves Due Process+3Improves Government Transparency+2
- National Security And Foreign Policy
- Improves Cybersecurity Defense+8
- Demographic And Interest Groups
- Good For Low Income Households+2Good For Middle Class Households+2Good For Rural Residents+2Good For Urban Residents+2Good For Business Owners-3
- Economy And Finance
- Improves Consumer Protection+5
- Education And Technology
- Improves Data Privacy+4
- Environment Energy And Infrastructure
- Improves Environmental Protections+4
- 9/4/2025
- 1 Cosponsor added.
- 6/3/2025
- 1 Cosponsor added.
- 4/17/2025
- 1 Cosponsor added.
- 4/2/2025
- Referred to the Subcommittee on Water Resources and Environment.
- Referred to the Committee on Transportation and Infrastructure, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
- Introduced in House
Robert BresnahanRepublican · Pennsylvania
Brad FinstadRepublican · Minnesota
Eugene VindmanDemocrat · Virginia