Bipartisan FLOWS Act Advances Federal Support for Rural Water System Cybersecurity and Modernization
New Senate legislation would fund digital infrastructure upgrades for small utilities serving fewer than 3,300 people, addressing mounting cybersecurity vulnerabilities alongside a parallel EPA reset of federal water technical assistance programs.
Bipartisan Senate legislation introduced in March 2026 would establish a new competitive federal grant program to help the nation’s smallest water and wastewater utilities upgrade aging infrastructure with digital monitoring tools and strengthen defenses against growing cybersecurity threats. The Futureproofing Local Operations for Water Systems (FLOWS) Act, sponsored by Senators John Boozman (R-AR) and Mark Kelly (D-AZ), arrives simultaneously with a significant recalibration of EPA’s technical assistance programs for water systems — together signaling a concentrated federal effort to address mounting operational and security vulnerabilities in rural water infrastructure across the United States.
The United States maintains approximately 50,000 community water systems, but the smallest — those serving communities of fewer than 3,300 people — face a distinct set of structural challenges that have grown more acute in recent years. Constrained budgets, limited staffing, and aging capital equipment have made it difficult for these utilities to adopt the digital monitoring and control tools that have become standard practice in larger urban systems. The gap between small and large utilities has widened alongside rising expectations for system reliability, water quality compliance, and resilience against external threats.
Water and wastewater utility infrastructure has increasingly attracted the attention of malicious actors. A series of high-profile intrusion attempts over the past several years exposed vulnerabilities in systems relying on legacy supervisory control and data acquisition (SCADA) platforms that were not designed with modern cybersecurity requirements in mind. Federal agencies including CISA and EPA have repeatedly flagged small and mid-sized water utilities as particularly exposed, citing inadequate IT staffing and the absence of network segmentation between operational and administrative systems. The FLOWS Act directly addresses this exposure by including cybersecurity training and upgrades as eligible grant expenditures alongside leak detection hardware, pressure management tools, and real-time water quality monitoring systems.
The FLOWS Act would authorize $50 million annually through a competitive EPA grant program targeting rural water, wastewater, and stormwater systems. Critically, the legislation does not require a local funding match — a structural barrier that has historically prevented small utilities with narrow ratepayer bases from accessing federal modernization resources. It would also permit grant funding to cover the ongoing maintenance of software systems, addressing a common problem in which initial technology deployments fail to achieve lasting improvements because operational budgets cannot absorb recurring costs.
The legislation’s introduction coincides with a significant policy shift at EPA. On March 4, 2026, the agency launched its Real Water Technical Assistance initiative — known as RealWaterTA — described by EPA Assistant Administrator for Water Jess Kramer as a return to core technical assistance principles under the Safe Drinking Water Act and Clean Water Act. The initiative rescinds a 2023 directive that had expanded the scope of federally supported technical assistance and refocuses resources on core services: engineering and design expertise, operational support, workforce development, and financial management. The convergence of the FLOWS Act and RealWaterTA creates a dual-track federal posture: one addressing capital investment for technology deployment, the other reorienting the delivery of operational and technical knowledge to systems in compliance distress.
Together, these developments could generate material capital deployment across rural water markets. Analysts tracking federal infrastructure spending note that the digital monitoring technologies covered under the FLOWS Act — including flow sensors, automated control systems, and advanced metering infrastructure — represent a segment of the water technology market that has seen sustained growth but has remained difficult to penetrate in communities below a certain population threshold, precisely because of the funding mismatch the legislation targets.
Developments of this scale, if enacted, are likely to create measured but distinct demand shifts for specialized professionals within the water and wastewater sector. Rural utilities seeking to implement digital monitoring and control platforms would require integration engineers and systems specialists with operational technology experience — professionals capable of configuring SCADA interfaces, deploying sensor networks, and validating system performance within the constraints of small-utility environments. This profile differs meaningfully from the generalist IT professionals who have historically been available to rural systems, potentially creating demand for contractors and technical services firms with utility-specific operational technology expertise.
The explicit inclusion of cybersecurity training within the FLOWS Act’s grant-eligible activities may also accelerate demand for water utility cybersecurity professionals — a role that has become increasingly differentiated from general information security practice, as water systems operate under sector-specific regulatory frameworks and face threats that exploit industrial control systems rather than conventional enterprise IT infrastructure. The EPA’s concurrent RealWaterTA initiative, with its emphasis on engineering and design, financial management, and workforce development, may generate demand within technical assistance provider organizations for certified drinking water operators, utility finance specialists, and professional engineers with demonstrated experience in compliance recovery. Organizations that deploy staff directly to struggling systems — rather than providing advisory services at a distance — appear positioned to expand under the updated federal framework.
Congressional observers will monitor whether the FLOWS Act advances through committee and secures floor consideration in a Senate calendar subject to significant budgetary pressure. The legislation’s bipartisan sponsorship — bridging Boozman’s rural-state constituency and Kelly’s southwestern water security concerns — is considered a meaningful asset, though appropriators will scrutinize the $50 million annual authorization against competing infrastructure spending priorities. On the regulatory side, EPA’s RealWaterTA rollout is expected to proceed through its network of technical assistance providers with initial program guidance clarifying which existing activities qualify under the updated framework.
The broader sector faces a critical near-term deadline: the Infrastructure Investment and Jobs Act’s water infrastructure funding provisions expire in September 2026, and reauthorization prospects remain uncertain. The outcome of that reauthorization effort will shape capital planning for utilities of all sizes through the end of the decade. Industry stakeholders are also tracking EPA’s deliberations over a potential extension of the PFAS compliance deadline to 2031 — a decision that would materially affect investment timing and contractor workloads for thousands of systems currently building compliance plans around the existing schedule.
