Law / United States / 
Oklahoma
Water utilities: immediate report of a cybersecurity or infrastructure security event to the Public Utility Division
OAC 165:65-9-2(4), water utility cybersecurity event reporting
In force.
A vulnerability and incident reporting rule binding private bodies.
- Obligation class
- Reporting
As of .
What it requires
- This binds a a water utility serving Oklahoma customers under the Corporation Commission's rules, which you declare by stating that you operate an essential service.
- Report cybersecurity or infrastructure security events that affect customers immediately to the Public Utility Division Director or designee.
These lines are LexLint's reading of the law's text, as of .
What this law does
The utility is required to report cybersecurity or infrastructure security events that affect customers immediately to the PUD Director or designee.
When LexLint raises it
When your app profile says your app runs an essential service.