Data breach notification
Data breach notification obligations for Energy, Power & Commodities companies now arrive from multiple directions simultaneously. The Federal Energy Regulatory Commission and the North American Electric Reliability Corporation have both issued mandatory incident reporting requirements under NERC CIP-008-6, while the U.S. Department of Energy issued a separate 2023 guidance pressing bulk power system operators on cyber incident disclosure timelines. Compliance teams in this sector are currently reconciling those federal obligations against a patchwork of state-level breach notification statutes that set shorter clocks and broader definitions of covered data.
Watch
- NERC CIP-008-6 incident reporting timelines and what triggers mandatory notification
- DOE cybersecurity incident disclosure guidance for bulk power system operators, 2023
- State breach notification laws with sub-72-hour windows that conflict with federal timelines
- FERC proposed rulemaking on expanded cyber incident reporting for public utilities
- Vendor and third-party OT systems now pulled into breach notification scope by regulators
Recent material activity in Energy, Power & Commodities
FERC staff issues final SEIS for Idaho Power Hells Canyon Hydroelectric Project relicensing proceeding
FERC staff issued a final Supplemental Environmental Impact Statement on September 1, 2026, supplementing the August 2007 final EIS for Idaho Power Company's Hells Canyon Hydroelectric Project. The document advances the …
Read a full sample brief →FERC opens scoping period for MountainWest Overthrust Pipeline Green River West Expansion Project
On September 4, 2026, the Federal Energy Regulatory Commission opened a scoping period for the Green River West Expansion Project, proposed by MountainWest Overthrust Pipeline, LLC. The notice solicits public and agency …
Read a full sample brief →FERC accepts DeepGreen Cook Inlet SPV preliminary hydropower permit application and solicits competing filings
FERC has accepted a preliminary permit application from DeepGreen Cook Inlet SPV, LLC for a proposed hydropower project in Cook Inlet, Alaska. The notice opens a comment and competing-application window under the Federal…
Read a full sample brief →FERC publishes Florida Gas Transmission blanket authorization request with intervention and protest deadline
On September 3, 2026, the Federal Energy Regulatory Commission published a notice of Florida Gas Transmission Company, LLC's request under the natural gas pipeline blanket certificate program. The notice establishes a de…
Read a full sample brief →EPA issues SRE decisions on 34 petitions for the 2025 RFS compliance year
The EPA announced final decisions on 34 small refinery exemption petitions under the Renewable Fuel Standard program for the 2025 compliance year, published September 2, 2026. The agency also reissued one 2024 compliance…
Read a full sample brief →DOE repeals fossil fuel restrictions for new federal buildings and stays clean energy compliance date
The Department of Energy published a final rule on September 2, 2026 repealing clean energy requirements for new federal buildings and major renovations. The agency simultaneously stayed the compliance date for the affec…
Read a full sample brief →FERC issues environmental assessment notice for Forza Pipeline LLC proposed natural gas project
On September 2, 2026, the Federal Energy Regulatory Commission published a Notice of Availability of the Environmental Assessment for the proposed Forza Pipeline Project, opening the public comment period under FERC's ce…
Read a full sample brief →FERC opens pre-filing licensing process for Columbia Basin Hydropower with public scoping and study requests
FERC issued a Notice of Intent on September 2, 2026, opening the pre-filing process for a new hydropower license application at Columbia Basin Hydropower. The notice initiates formal scoping, invites comments on the Pre-…
Read a full sample brief →FERC Energy Markets & Grid Regulation release pending Cresthaven Analytics full analysis: Columbia Basin Hydropower; Notice of Intent To File License Application, Filing of Pre-Application Document (Pad), Commencement of Pre-Filing Process,
FERC Energy Markets & Grid Regulation published a regulatory release titled 'Columbia Basin Hydropower; Notice of Intent To File License Application, Filing of Pre-Application Document (Pad), Commencement of Pre-Filing P…
Read a full sample brief →FERC opens pre-filing licensing process for Columbia Basin Hydropower project on the Columbia River system
On September 2, 2026, the Federal Energy Regulatory Commission published a Notice of Intent and Pre-Application Document for a new hydropower license application from Columbia Basin Hydropower. The notice opens the forma…
Read a full sample brief →