Amended in Senate August 18, 2015

Amended in Assembly April 30, 2015

Amended in Assembly March 24, 2015

California Legislature—2015–16 Regular Session

Assembly BillNo. 853


Introduced by Assembly Member Roger Hernández

February 26, 2015


An act to add Section 764 to the Public Utilities Code, relating to energy.

LEGISLATIVE COUNSEL’S DIGEST

AB 853, as amended, Roger Hernández. Electrical and gas corporations: security of plant and facilities.

Under existing law, the Public Utilities Commission has regulatory authority over public utilities, including electrical corporations and gas corporations, as defined. If the commission finds after a hearing that the rules, practices, equipment, appliances, facilities, or service of any public utility, or of the methods of manufacture, distribution, transmission, storage, or supply employed by the public utility, are unjust, unreasonable, unsafe, improper, inadequate, or insufficient, the Public Utilities Act requires that the commission determine and, by order or rule, fix the rules, practices, equipment, appliances, facilities, service, or methods to be observed, furnished, constructed, enforced, or employed. The Public Utilities Act requires the commission to prescribe rules for the performance of any service or the furnishing of any commodity of the character furnished or supplied by any public utility and, on proper demand and tender of rates, require the public utility to furnish the commodity or render the service within the time and upon the conditions provided in the rules adopted by the commission.

This billbegin delete would, to the extent feasible,end deletebegin insert wouldend insert require an electrical corporation or gas corporation to utilize direct employees, as defined, for any work associated with the design, engineering, and operation of its nuclear, electrical, and gas infrastructure, including all computer and information technology systems, unless the utility filesbegin delete a Tier 3 advice letter with the commission that demonstratesend deletebegin insert a request to employ persons that are not direct employeesend insertbegin insert with the commissionend insertbegin insert an application in the utility’s general rate case. The bill would require that the request be a separate stand-alone section that is not embedded in the general requested staffing change proposals. The bill would require the utility to demonstrateend insert that the work can be performed safely and securely, and without jeopardizing the security of its nuclear, electrical, and gas infrastructure, by persons that are not direct employees. The bill would require the commission tobegin delete open a proceeding, or expand the scope of an existing proceeding, to evaluate the advice letter and to hold not less than one duly noticed public hearing for the proceeding.end deletebegin insert evaluate the utility’s proposal to utilize persons that are not direct employeesend insertbegin insert.end insert The bill would require the commission to issue a writtenbegin delete decisionend deletebegin insert decision, as part of the general rate case proceeding,end insert determining whether the electrical corporation or gas corporation may utilize persons that are not direct employees for the described work.

Under existing law, a violation of the Public Utilities Act or any order, decision, rule, direction, demand, or requirement of the commission is a crime.

Because the provisions of this bill would be a part of the act and because a violation of an order or decision of the commission implementing its requirements would be a crime, the bill would impose a state-mandated local program by creating a new crime.

The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.

This bill would provide that no reimbursement is required by this act for a specified reason.

Vote: majority. Appropriation: no. Fiscal committee: yes. State-mandated local program: yes.

The people of the State of California do enact as follows:

P3    1

SECTION 1.  

Section 764 is added to the Public Utilities Code,
2to read:

3

764.  

(a) The Legislature finds and declares all of the following:

4(1) Protecting the security of nuclear, electrical, and natural gas
5utility systems is a paramount state interest.

6(2) Protecting the privacy of ratepayers’ personal information,
7including usage information, is a paramount state interest.

8(3) Recent intrusions into major corporate computer systems,
9including Sony and Anthem Blue Cross, and the theft of
10information from those systems have demonstrated the
11vulnerability of those systems.

12(4) The computer systems of California’s electrical corporations
13and gas corporations have information about the design,
14engineering, and operation of the nuclear, electrical, and natural
15gas utility infrastructure, as well as personal information about
16California ratepayers. This information could be used to
17compromise the security of California’s utility infrastructure and
18the privacy of California’s ratepayers.

19(5) Widespread deployment of smart meters, smart grid
20equipment, and microgrids increases the importance of protecting
21the computer systems of electrical corporations and gas
22corporations.

23(6) The part of any computer system that is most vulnerable to
24being compromised is the personnel who operate that system.

25(7) Electrical corporations and gas corporations should make
26every reasonable effort to protect their computer systems from
27unauthorized intrusions.

28(8) To protect the security of electrical and natural gas utility
29computer systems, including nuclear infrastructure, the information
30technology personnel who operate those systems should be direct
31employees of the electrical corporation or gas corporation.

32(9) To protect the security of nuclear, electrical, and gas utility
33infrastructure, the design, engineering, and operation of that
34infrastructure should, to the extent feasible, be performed by direct
35employees of the electrical corporation or gas corporation.

36(b) For purposes of this section, “direct employees” for
37construction or maintenance work include the employees of a
38contractor or subcontractor licensed in California and working
P4    1under the direct supervision of the electrical corporation or gas
2corporation.

3(c) begin deleteTo the extent feasible, an end deletebegin insertAn end insertelectrical corporation or gas
4corporation shall utilize direct employees for any work associated
5with the design, engineering, and operation of its nuclear, electrical,
6and gas infrastructure, including all computer and information
7technology systems, unless the utility complies with the
8requirements of this section and obtains the approval of the
9commission pursuant to this section.

10(d) Before utilizing persons that are not direct employees for
11work associated with the design, engineering, and operation of its
12nuclear, electrical, and gas infrastructure, including all computer
13and information technology systems, an electrical corporation or
14gas corporation shall filebegin delete a Tier 3 advice letter with the commission
15that demonstratesend delete
begin insert a request to employ persons that are not direct
16employees with the commission, as part of the utility’s general
17rate case application. The request shall be a separate stand-alone
18section that is not embedded in the general requested staffing
19change proposals. The utility shall demonstrateend insert
that the work can
20be performed safely and securely, and without jeopardizing the
21security of its nuclear, electrical, and gas infrastructure.

22(e) The commission shallbegin delete open a proceeding, or expand the
23scope of an existing proceeding, to evaluate the advice letter. The
24commission shall hold not less than one duly noticed public hearing
25for the proceeding. Theend delete
begin insert evaluate the utility’s proposal to utilize
26persons that are not direct employees for work associated with the
27design, engineering, and operation of its nuclear, electrical, and
28gas infrastructure, including all computer and information
29technology systems.end insert

30begin insert(f)end insertbegin insertend insertbegin insertTheend insert commission shall issue a written decisionbegin insert as part of the
31general rate case proceedingend insert
determining whether the electrical
32corporation or gas corporation may utilize persons that are not
33direct employees for the described work.

begin delete

34(f)

end delete

35begin insert(g)end insert A person or corporation owning or operating a qualifying
36facility pursuant to federal law or a facility that is an exempt
37wholesale generator is not an electrical corporation due to the
38ownership or operation of that facility. This subdivision is
39declaratory of existing law.

P5    1

SEC. 2.  

No reimbursement is required by this act pursuant to
2Section 6 of Article XIII B of the California Constitution because
3the only costs that may be incurred by a local agency or school
4district will be incurred because this act creates a new crime or
5infraction, eliminates a crime or infraction, or changes the penalty
6for a crime or infraction, within the meaning of Section 17556 of
7the Government Code, or changes the definition of a crime within
8the meaning of Section 6 of Article XIII B of the California
9Constitution.



O

    96