Law / United States / 
Oklahoma
Electric utilities: immediate report of a cybersecurity or infrastructure security event to the Public Utility Division
OAC 165:35-33-7(c), electric utility cybersecurity event reporting
In force.
A vulnerability and incident reporting rule binding private bodies.
- Obligation class
- Reporting
As of .
What it requires
- This binds a an electric utility serving Oklahoma customers under the Corporation Commission's rules, which you declare by stating that you operate an essential service.
- Report cybersecurity or infrastructure security events that affect customers immediately to the Public Utility Division Director and his or her designee.
- The subchapter that contains this duty states that a utility is not otherwise required to comply with its provisions beyond the Certification Letter and review provisions, so check with the Division how the immediate-report duty applies to you.
These lines are LexLint's reading of the law's text, as of .
What this law does
The utility is required to report cybersecurity or infrastructure security events that affect customers immediately to the PUD Director and his or her designee. The electric utility homeland security subchapter states that a utility is not otherwise required to comply with its provisions beyond the Certification Letter and the review provisions.
When LexLint raises it
When your app profile says your app runs an essential service.