States and Water Associations Challenge EPA’s Cybersecurity Rule for Public Water Systems

On July 25th, a petition requesting review of the U.S. Environmental Protection Agency’s (EPA) newly instituted rule was filed with the Eighth Circuit. This latest decree from the EPA mandates states to analyze and document cybersecurity threats to their public water systems.

The petition against this EPA regulation came not only from the states of Missouri, Arkansas, and Iowa, but also from intervenors American Water Works Association and National Rural Water Association. These two water associations joined forces with the aforementioned states in challenging the new rule.

The critical nature of public water systems to the well-being of the community, physical health, and economic prosperity of individuals is evident. Even minor disruptions can have significant implications, and these potential risks are amplified with the advent of cyber threats. In response to this emerging threat, the EPA enacted this rule to enhance the protection of these public water systems through improved cybersecurity measures.

However, this new directive has been met with stern resistance. Those opposing it argue that it imposes undue burden on the states and the water associations. Both the states and water associations claim that the rule exceeds the EPA’s statutory authority and lacks proper coordination and balance with other federal cybersecurity standards and procedures.

The legalities surrounding this issue are still unfolding, and the ensuing discourse presents an intriguing intersection of environmental regulation, state rights, and cyber threat landscape. The outcomes of this legal challenge promise to impact not only public water system operations but potentially set a precedent for future cybersecurity regulations as well.

For more detailed information about the case and its ongoing proceedings, access the legal report here.