Water supply: systems; cyber-physical security and operational technology protections for public water systems; provide for. Amends sec. 21 of 1976 PA 399 (MCL 325.1021) & adds sec. 8a.

This bill requires public water systems in Michigan to implement security measures against cyberattacks, physical threats, and system compromises. It mandates the creation of risk-based cybersecurity programs aligned with national standards and the use of specific safety features, such as redundant cooling, manual overrides, and network segmentation. Additionally, the legislation obligates these systems to maintain incident response and disaster recovery plans that outline roles, communication procedures, and coordination with emergency responders. Violations of these new requirements are subject to civil fines of up to $25,000 per day, while other violations of the Safe Drinking Water Act remain punishable by existing misdemeanor penalties.