AI-generated summary, not yet reviewed by Better Utah staff. Please consult the bill text.

New rules for protecting Utah's critical systems — power grids, water systems, emergency communications, data centers, and government networks — from foreign adversary threats would take effect under this bill. It would direct the Utah Cyber Center to develop and annually update security guidance for government agencies, offer voluntary security assessments when foreign adversary technology is involved in critical infrastructure, and publish a list of prohibited technologies drawn from existing federal ban lists (such as the Pentagon's 1260H list and the FCC's Covered List); starting July 1, 2026, government entities and critical infrastructure providers would be barred from buying, renewing contracts for, or newly deploying anything on that list, unless no reasonable alternative exists. The bill would also prohibit any company or government entity with significant access to critical infrastructure from entering into agreements that would let a foreign adversary's government, political party, business, or citizen remotely access or control those systems, again with an exception if no reasonable alternative is available. Additionally, agencies reporting data breaches to the Cyber Center would be required to disclose whether foreign adversary technology was involved.