All Roll Calls
Yes: 217 • No: 1
UtahH.B. 1652026 General SessionHouse
Critical Infrastructure Amendments
Sponsored By: Walt Brooks (Republican)
Signed by Governor
TechnologyDivision of Technology ServicesTelecommunicationsBusinessState FacilitiesPublic Utilities and TechnologyContracts and ObligationsGovernment Operations (State Issues)Data and Cyber Security
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
2 provisions identified: 1 benefits, 0 costs, 1 mixed.
New technology limits for Utah infrastructure
Beginning July 1, 2026, Utah's Cyber Center must publish and maintain a list of prohibited companies and technology. The list targets risks of foreign adversaries gaining remote access to or control of critical infrastructure. It must include the Pentagon 1260H and Federal Communications Commission Covered lists. Qualifying relabeled products and subsidiaries are also covered when the Center identifies a reasonable alternative provider. Government entities and infrastructure providers cannot make or renew contracts for listed technology or put it into service. Use remains allowed when the Center determines that no reasonable alternative meets the infrastructure need. Beginning May 6, 2026, entities building, repairing, maintaining, operating, or having significant access to Utah infrastructure face another ban. They cannot make infrastructure agreements giving foreign principals from foreign adversaries direct or remote access or control, unless no reasonable alternative exists. Foreign principals include covered foreign governments, businesses, individuals, and entities they control. The law uses the federal foreign-adversary country list as of January 1, 2026.
Cybersecurity help for Utah public services
Beginning May 6, 2026, Utah's Cyber Center must publish cybersecurity guidance for government entities that operate critical infrastructure. It must review the guidance at least annually and include it in cybersecurity briefings and materials. Guidance covers foreign-adversary risks, security controls, monitoring, access limits, and risk records. It also recommends switching technology when feasible and cost-effective, identifies higher-risk infrastructure, and recommends backup plans for manual operations. Government operators can request security reviews when considering foreign-adversary technology or finding it already in use. The Center gives priority based on system and data sensitivity, potential harm, available resources, and other relevant factors. Reviews can identify weaknesses, assess potential harm, and recommend safeguards, contract terms, or lower-risk alternatives. The Center can coordinate with state and federal agencies, alert affected officials to major risks, and refer concerns to enforcement agencies. Reviews are advisory unless another law applies, and review information is protected under Utah's government-records law. When reporting a breach to the Center, infrastructure entities must state whether foreign-adversary technology, software, or services were involved.
Sponsors & Cosponsors
Sponsor
Walt Brooks
Republican • House
Cosponsors
Keven J. Stratton
Republican • Senate
Roll Call Votes
House vote • 3/2/2026
House Motion to Adopt Joint Conference Comm Rpt
Yes: 0 • No: 0
House vote • 3/2/2026
House Conference Committee - Final Passage
Yes: 68 • No: 1
House vote • 2/27/2026
House/ refuse to concur with Senate amendment
Yes: 0 • No: 0
Senate vote • 2/27/2026
Senate/ refused to recede from Senate amendments
Yes: 0 • No: 0
Senate vote • 2/27/2026
Senate Motion to Adopt Joint Conference Comm Rpt
Yes: 0 • No: 0
Senate vote • 2/27/2026
Senate Conference Committee - Final Passage
Yes: 24 • No: 0
Senate vote • 2/26/2026
Senate/ passed 3rd reading
Yes: 20 • No: 0
Senate vote • 2/25/2026
Senate/ passed 2nd reading
Yes: 23 • No: 0
Senate vote • 2/18/2026
Senate Comm - Favorable Recommendation
Yes: 6 • No: 0
Senate vote • 2/18/2026
Senate Comm - Substitute Recommendation
Yes: 6 • No: 0
House vote • 2/10/2026
House/ passed 3rd reading
Yes: 60 • No: 0
House vote • 2/2/2026
House Comm - Favorable Recommendation
Yes: 10 • No: 0
Actions Timeline
Governor Signed
3/17/2026House/ to Governor
3/11/2026HouseHouse/ received enrolled bill from Printing
3/11/2026HouseHouse/ enrolled bill to Printing
3/6/2026HouseEnrolled Bill Returned to House or Senate
3/6/2026Draft of Enrolled Bill Prepared
3/4/2026Bill Received from House for Enrolling
3/4/2026House/ signed by Speaker/ sent for enrolling
3/3/2026HouseHouse/ received from Senate
3/3/2026HouseSenate/ to House
3/2/2026SenateSenate/ signed by President/ returned to House
3/2/2026SenateSenate/ received from House
3/2/2026SenateHouse/ to Senate
3/2/2026HouseHouse Conference Committee - Final Passage
3/2/2026House Motion to Adopt Joint Conference Comm Rpt
3/2/2026House/ received from Senate
3/2/2026HouseSenate/ to House
2/27/2026SenateSenate Conference Committee - Final Passage
2/27/2026Senate Motion to Adopt Joint Conference Comm Rpt
2/27/2026Senate/ received from House
2/27/2026SenateConference Committee Report
2/27/2026Bill Substituted by Conference Committee
2/27/2026House/ to Senate
2/27/2026HouseHouse Conference Committee Appointed
2/27/2026House/ received from Senate
2/27/2026House
Bill Text
Enrolled
3/6/2026
Substitute #4
2/27/2026
Substitute #3
2/17/2026
Substitute #2
2/5/2026
Substitute #1
1/23/2026
Introduced
1/7/2026