UtahH.B. 1652026 General SessionHouseWALLET

Critical Infrastructure Amendments

Sponsored By: Walt Brooks (Republican)

Signed by Governor

TechnologyDivision of Technology ServicesTelecommunicationsBusinessState FacilitiesPublic Utilities and TechnologyContracts and ObligationsGovernment Operations (State Issues)Data and Cyber Security

Your PRIA Score

Score Hidden

Personalized for You

How does this bill affect your finances?

Sign up for a PRIA Policy Scan to see your personalized alignment score for this bill and every other piece of legislation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.

Free to start

Bill Overview

Analyzed Economic Effects

4 provisions identified: 1 benefits, 0 costs, 3 mixed.

No foreign adversary tech in critical systems

Beginning July 1, 2026, government agencies and critical‑infrastructure providers cannot buy, renew, or put into service tech on the Utah Cyber Center’s prohibited list. The Center must publish and keep this list, which at least includes items on the Pentagon 1260H List, the FCC Covered List, and relabeled or subsidiary versions when a reasonable alternative exists. An agency may use a listed item only when no reasonable alternative meets the specific need, with any recommended safeguards.

Guidance and assessments for critical systems

The Utah Cyber Center, within available resources and coordinating with federal agencies, creates and updates yearly guidance to protect critical infrastructure from foreign cyber threats. It covers best practices, risk checks, limits on foreign access, transition advice, and manual backup plans, and posts the guidance online. Operators of critical infrastructure can ask the Center for security assessments when they consider or find foreign‑adversary technology. The Center prioritizes requests and can give vulnerability checks, risk and impact reports, mitigation steps, and lower‑risk alternatives. Assessments and recommendations are advisory, so agencies make final buying and transition choices unless another prohibition applies.

No foreign control of critical infrastructure

Starting May 6, 2026, companies and government entities that build, repair, maintain, operate, or have major access to Utah critical infrastructure cannot sign contracts with a foreign principal from a foreign adversary if the deal allows direct or remote access or control. A narrow exception applies only when no reasonable alternative exists to meet that specific need.

Risk alerts and breach reporting for agencies

Beginning May 6, 2026, if the Cyber Center finds a serious risk from foreign‑adversary tech in critical infrastructure, it notifies the chief information officer and affected agencies. It can recommend stronger monitoring, added controls, transition plans, or referral to law enforcement. When an agency that runs critical infrastructure reports a data breach to the Cyber Center, it must state whether foreign‑adversary technology, software, or services were involved.

Free Policy Watch

You just read the policy. Now see what it costs you.

Pick a topic. PRIA runs your household against live legislation and sends you a free personalized readout.

Pick a topic to get started

Sponsors & Cosponsors

Sponsor

  • Walt Brooks

    Republican • House

Cosponsors

  • Keven J. Stratton

    Republican • Senate

Roll Call Votes

All Roll Calls

Yes: 217 • No: 1

House vote 3/2/2026

House Motion to Adopt Joint Conference Comm Rpt

Yes: 0 • No: 0

House vote 3/2/2026

House Conference Committee - Final Passage

Yes: 68 • No: 1

House vote 2/27/2026

House/ refuse to concur with Senate amendment

Yes: 0 • No: 0

Senate vote 2/27/2026

Senate/ refused to recede from Senate amendments

Yes: 0 • No: 0

Senate vote 2/27/2026

Senate Motion to Adopt Joint Conference Comm Rpt

Yes: 0 • No: 0

Senate vote 2/27/2026

Senate Conference Committee - Final Passage

Yes: 24 • No: 0

Senate vote 2/26/2026

Senate/ passed 3rd reading

Yes: 20 • No: 0

Senate vote 2/25/2026

Senate/ passed 2nd reading

Yes: 23 • No: 0

House vote 2/18/2026

Senate Comm - Substitute Recommendation

Yes: 6 • No: 0

House vote 2/18/2026

Senate Comm - Favorable Recommendation

Yes: 6 • No: 0

House vote 2/10/2026

House/ passed 3rd reading

Yes: 60 • No: 0

House vote 2/2/2026

House Comm - Favorable Recommendation

Yes: 10 • No: 0

Actions Timeline

  1. Governor Signed

    3/17/2026
  2. House/ to Governor

    3/11/2026House
  3. House/ received enrolled bill from Printing

    3/11/2026House
  4. House/ enrolled bill to Printing

    3/6/2026House
  5. Enrolled Bill Returned to House or Senate

    3/6/2026
  6. Draft of Enrolled Bill Prepared

    3/4/2026
  7. Bill Received from House for Enrolling

    3/4/2026
  8. House/ signed by Speaker/ sent for enrolling

    3/3/2026House
  9. House/ received from Senate

    3/3/2026House
  10. Senate/ to House

    3/2/2026Senate
  11. Senate/ signed by President/ returned to House

    3/2/2026Senate
  12. Senate/ received from House

    3/2/2026Senate
  13. House/ to Senate

    3/2/2026House
  14. House Conference Committee - Final Passage

    3/2/2026
  15. House Motion to Adopt Joint Conference Comm Rpt

    3/2/2026
  16. House/ received from Senate

    3/2/2026House
  17. Senate/ to House

    2/27/2026Senate
  18. Senate Conference Committee - Final Passage

    2/27/2026
  19. Senate Motion to Adopt Joint Conference Comm Rpt

    2/27/2026
  20. Senate/ received from House

    2/27/2026Senate
  21. Conference Committee Report

    2/27/2026
  22. Bill Substituted by Conference Committee

    2/27/2026
  23. House/ to Senate

    2/27/2026House
  24. House Conference Committee Appointed

    2/27/2026
  25. House/ received from Senate

    2/27/2026House

Bill Text

  • Enrolled

    3/6/2026

  • Substitute #4

    2/27/2026

  • Substitute #3

    2/17/2026

  • Substitute #2

    2/5/2026

  • Substitute #1

    1/23/2026

  • Introduced

    1/7/2026

Related Bills

Back to State Legislation

Take It Personal

Get Your Personalized Policy View

Take the PRIA Score to see how policy affects your household, then upgrade to PRIA Full Coverage for year-round monitoring.

Already have an account? Sign in