Critical Infrastructure Designation in Electricity Law

Detailed Explanation With Case Laws

1. Introduction

Critical infrastructure designation in electricity law means the legal process of identifying electricity assets, systems, operators or services that are so important that their failure could seriously affect public safety, economic activity, national security, or other essential services.

Electricity infrastructure may include power stations, transmission lines, substations, distribution networks, control centres, interconnectors, storage facilities and digital control systems. Once an asset or operator is designated as critical, additional legal duties may apply, such as security measures, risk assessments, emergency planning, cybersecurity requirements, reporting and regulatory supervision.

2. Meaning of Critical Infrastructure Designation

Designation is different from ordinary electricity regulation.

Normal electricity regulation may concern:

licensing;

tariffs;

market competition;

technical standards;

consumer protection; and

connection arrangements.

Critical infrastructure designation, however, focuses on the consequences of infrastructure failure.

For example, a small local electricity facility and a major transmission control centre may both be regulated electricity assets, but their failure may have very different consequences. A designation framework allows authorities to apply stronger protection to infrastructure whose disruption could create large-scale or cascading effects.

3. Criteria for Designation

A legal framework normally considers several factors.

A. Essentiality

The authority asks whether the infrastructure provides an essential electricity service.

B. Number of People Affected

An asset supplying a very large population may receive greater protection because its failure could affect many consumers.

C. Economic Importance

Electricity infrastructure supporting major industrial or commercial areas may be considered important because prolonged failure could cause significant economic disruption.

D. Geographic Impact

Authorities may examine whether failure would affect a local area, a region or the national electricity system.

E. Interdependency

Electricity supports telecommunications, water, transport, healthcare and other essential services. Therefore, an electricity asset may be critical because its failure could create cascading consequences.

F. Cybersecurity Importance

Modern electricity infrastructure uses SCADA, digital protection systems, communication networks and remote-control technologies. A cyber compromise may therefore justify additional security requirements.

4. Legal Consequences of Designation

Once infrastructure is designated as critical, several additional obligations may arise.

Security Requirements

Operators may have to introduce physical and cybersecurity measures.

Risk Assessments

Operators may be required to regularly assess threats and vulnerabilities.

Emergency Planning

Operators may need plans for maintaining or restoring electricity supplies during major incidents.

Incident Reporting

Serious security or operational incidents may have to be reported to regulators.

Government Oversight

Designated infrastructure may receive stronger regulatory supervision and may be subject to inspections or audits.

5. European Union Approach

The EU Critical Entities Resilience Directive (CER Directive 2022/2557) establishes a framework for identifying and strengthening the resilience of entities providing essential services. The energy sector is expressly included.

The framework requires Member States to identify critical entities and assess risks that could disrupt essential services. It also requires resilience measures covering threats such as natural disasters, sabotage and other disruptive events.

The NIS2 Directive 2022/2555 complements this framework by addressing cybersecurity. In the electricity sector, it covers important electricity undertakings and other entities involved in electricity generation, transmission, distribution and related activities.

This demonstrates an important modern approach: physical infrastructure resilience and cybersecurity are increasingly regulated together.

6. UK Approach

The UK has several overlapping frameworks for protecting important electricity infrastructure.

The Network and Information Systems Regulations 2018 impose cybersecurity and resilience duties on Operators of Essential Services, including parts of the energy sector. (gov.uk)

The UK Government's Energy Sector Cyber Security Strategy, published in 2026, identifies the need to strengthen cyber resilience throughout the energy system and to understand critical systems and dependencies. (gov.uk)

Designation can therefore be connected with broader national-security, resilience and cybersecurity arrangements.

7. Relevant Case Laws

Hikvision USA, Inc. v FCC (D.C. Cir. 2024)

This case is important for understanding the legal limits of critical-infrastructure designation. The US Court of Appeals considered the FCC's reliance on government definitions of critical infrastructure when regulating communications equipment.

The court's reasoning demonstrates that regulators need a proper statutory basis and rational connection between the infrastructure classification and the regulatory action.

For electricity law, this principle is important because designation can impose significant obligations on private operators.

California Independent System Operator Corp. v FERC

This litigation concerning electricity-market regulation demonstrates the importance of treating the electricity system as an interconnected network rather than isolated commercial assets. Electricity reliability depends on coordination among generation, transmission and market participants.

This supports the broader regulatory logic behind critical infrastructure designation: the importance of an electricity asset can depend partly on its role within the wider system.

8. Importance for Electricity Law

Critical designation creates a bridge between ordinary electricity regulation and national resilience regulation.

It helps authorities answer three important questions:

What infrastructure is essential?

What could happen if it fails?

What additional legal protection is justified by that risk?

However, designation should be based on clear statutory criteria, evidence and proportionate regulatory requirements. An excessively broad definition can impose unnecessary burdens, while a narrow definition may leave genuinely important infrastructure insufficiently protected.

9. Conclusion

Critical infrastructure designation in electricity law is the process of legally identifying electricity assets or operators whose failure could have serious consequences for society, the economy or national security.

The modern approach is increasingly risk-based and system-wide. It considers not only the physical importance of power stations and transmission networks but also digital systems, cybersecurity, interdependencies and cascading failures.

Once designated, infrastructure may face stronger requirements concerning security, risk assessment, emergency planning, incident reporting and regulatory oversight. The case law also shows that such designation and resulting regulation should have a clear legal foundation and a rational connection to the risks being addressed.