PENNSYLVANIA, October 19 - (1) IS DEVELOPED BY AN ACCREDITED CYBERSECURITY

PROFESSIONAL;

(2) IMPLEMENTS ORGANIZATIONAL ACCOUNTABILITY AND

RESPONSIBILITIES FOR CYBER RISK MANAGEMENT ACTIVITIES; AND

(3) ESTABLISHES POLICIES, PLANS, PROCESSES AND

PROCEDURES FOR IDENTIFYING, REPORTING AND MITIGATING CYBER

RISK TO THE WATER SYSTEM'S AND WASTEWATER SYSTEM OPERATOR'S

COMMUNITY WATER SYSTEM OR COMMUNITY WASTEWATER SYSTEM.

§ 3707. ANNUAL INFORMATION TO CUSTOMERS.

A WATER SYSTEM OPERATOR SHALL ANNUALLY INFORM THE OPERATOR'S

CUSTOMERS OF COMPLIANCE WITH THIS CHAPTER IN A MANNER

ESTABLISHED BY THE COMMISSION.

§ 3708. REGULATIONS.

(A) TEMPORARY.--THE COMMISSION SHALL PROMULGATE TEMPORARY

REGULATIONS AS NECESSARY TO IMPLEMENT THIS CHAPTER. THE

TEMPORARY REGULATIONS SHALL NOT BE SUBJECT TO THE FOLLOWING:

(1) SECTIONS 201, 202, 203, 204 AND 205 OF THE ACT OF

JULY 31, 1968 (P.L.769, NO.240), REFERRED TO AS THE

COMMONWEALTH DOCUMENTS LAW .

(2) SECTIONS 204(B) AND 301(10) OF THE ACT OF OCTOBER

15, 1980 (P.L.950, NO.164), KNOWN AS THE COMMONWEALTH

ATTORNEYS ACT .

(3) THE ACT OF JUNE 25, 1982 (P.L.633, NO.181), KNOWN AS

THE REGULATORY REVIEW ACT .

(B) EXPIRATION.--THE TEMPORARY REGULATIONS PROMULGATED UNDER

SUBSECTION (A) SHALL EXPIRE UPON THE PROMULGATION OF FINAL FORM

REGULATIONS OR TWO YEARS FOLLOWING THE EFFECTIVE DATE OF THIS

SECTION, WHICHEVER IS EARLIER.

§ 3709. CONTINGENCY FOR PUBLIC FUNDING.

BEFORE A WATER OR WASTEWATER SYSTEM OPERATOR MAY RECEIVE A

20210SB0597PN0801 - 21 -

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30