The bill strengthens centralized cybersecurity information-sharing and funds resilience activities for the energy sector, but does so by narrowing public transparency and leaving assistance decisions to unchecked executive discretion.
Utilities and energy companies gain a centralized Energy Threat Analysis Center capability to share classified and unclassified threat intelligence and technical analytics, improving detection and mitigation of cyberattacks on the grid.
Utilities, energy companies, and state partners are more likely to voluntarily share sensitive incident data and indicators because shared information is exempted from FOIA and state/local disclosure laws, increasing private–public information exchange.
Utilities, energy companies, and rural communities retain a funded window for resilience activities and collaboration because the program authorization is extended through FY2027–2031.
Utilities, local governments, and other applicants have no legal right to assistance because the Secretary’s discretion to provide help is sole and unreviewable, reducing accountability and recourse if aid is denied.
Taxpayers and state governments face reduced transparency and limited independent oversight because the program is exempt from FACA and shared information is withheld from public disclosure.
Consumers and rural communities may have delayed awareness of systemic vulnerabilities or incidents because broad nondisclosure can hinder public notification and timely consumer protections.
Based on analysis of 2 sections of legislative text.
Expands an energy-sector cyberresilience program to authorize Energy Threat Analysis Centers, broaden information sharing and analytic work, exempt the program from FACA and FOIA, and extend authorization to 2027–2031.
Introduced February 2, 2026 by Kathy Castor · Last progress February 2, 2026
Expands and restructures a federal energy-sector cyberresilience program by authorizing one or more Energy Threat Analysis Centers, broadening program purposes to support classified and unclassified information sharing and technical analytic infrastructure, and extending the program’s authorization through 2031. It makes participation and assistance discretionary at the Secretary’s sole authority, exempts the program from the Federal Advisory Committee Act, and shields information shared under the program from public disclosure laws including FOIA and comparable state/tribal/local rules.