When a single, devastating shark attack reshapes national policy, it reveals as much about how Americans understand risk and public safety as it does about the ocean itself.
At a Glance
- Lulu’s Law turns rare shark attacks into events that trigger Amber Alert–style wireless emergency notifications to nearby cell phones.
- The law is rooted in the 2024 attack on Alabama teen Lulu Gribbin, whose survival and advocacy drove both Alabama’s state system and a federal bill.
- The alert system relies on existing FCC Wireless Emergency Alerts (WEA) infrastructure and geofencing, but its real-world effectiveness has not yet been empirically demonstrated.
- Experts agree shark attacks are extremely rare; the core debate is not about facts of the law but about whether this kind of intervention is proportionate and evidence-based.
From One Catastrophic Bite to a National Policy Idea
The path to Lulu’s Law begins with a very specific, very brutal event. In June 2024, Alabama teen Lulu Gribbin was attacked while swimming off Florida’s Gulf Coast; in seconds, she lost her left hand and ultimately her right leg above the knee. About ninety minutes earlier and only a few miles away, another person had been bitten in a separate incident, yet beachgoers at Lulu’s location had no real-time warning that anything unusual was unfolding along the shoreline. That temporal and geographic proximity—two severe attacks within roughly an hour and a short stretch of coast—is the emotional and political fulcrum of what followed.
Lulu survived, learned to walk with a prosthetic leg and use a prosthetic arm, and then moved deliberately into advocacy. In Alabama, she spoke on the House floor, met with lawmakers, and pushed for a statewide alert system explicitly modeled on Amber Alerts: when an unprovoked shark attack occurs off the Alabama coast, authorized officials would send a wireless message to phones in the vicinity, warning people to get out of the water and avoid the area. The state bill, often described as “Lulu’s Law” locally, passed the Alabama House easily and went on to be signed by Governor Kay Ivey, who framed it as “an added tool to keep those enjoying our Gulf of America waters safe.”
At the federal level, Senator Katie Britt of Alabama introduced a companion concept: direct the Federal Communications Commission (FCC) to treat shark attacks as eligible events for Wireless Emergency Alerts nationwide. The Senate version passed unanimously; the House followed with bipartisan support, and the bill—H.R. 2076/S. 1003, collectively known as Lulu’s Law—was sent to the president to be signed. In a political climate where almost nothing passes unanimously, that level of support underscores a powerful pattern: survivor-led, “commonsense” safety legislation triggered by a high-profile trauma tends to move quickly, even when the statistical risk it addresses is tiny.
What Lulu’s Law Actually Does: Mechanism and Scope
To understand Lulu’s Law, it helps to separate emotion from architecture. The federal legislation does not build a new alert network from scratch; it plugs shark attacks into the FCC’s existing Wireless Emergency Alert (WEA) framework—the same backbone used for severe weather warnings and Amber Alerts for abducted children. WEA already supports geofenced alerts: authorities define a polygon along the coast or around a beach zone, and all WEA-enabled phones within that area receive a short text-like message, typically accompanied by a distinctive sound and vibration.
At the state level, Alabama’s Lulu Gribbin Shark Alert System applies that mechanism narrowly to Baldwin and Mobile counties, its only coastal jurisdictions. Texts are sent when the Department of Conservation and Natural Resources receives a confirmed report of an unprovoked shark attack near shore, or a credible report of shark activity that poses imminent danger. Critically, lawmakers scaled back earlier drafts that would have allowed alerts for any shark sighting; tourism officials and wildlife managers worried that constant alerts for routine, non-threatening shark presence could both desensitize the public and damage local economies.
Federally, Lulu’s Law directs the FCC to classify shark attacks as events for which WEA messages may be transmitted and to issue implementing rules within a defined timeframe. It does not, at least in its core text and legislative summaries, force every coastal jurisdiction to use the system; rather, it “empowers” authorized local, state, tribal, and federal agencies to deploy alerts if and when they choose to. That distinction matters: it is enabling legislation, not a nationwide mandate. The practical result is an optional tool—a new category in the WEA menu—available to coastal authorities who want to use it.
There is, however, a gap between the legal framework and operational detail. The statute and public summaries do not spell out response time standards, verification protocols (who decides an attack is “confirmed”), or specific geofencing parameters. Those choices will fall to FCC rulemaking and local emergency managers. Until those rules are written and tested, the promise of “timely, accurate warnings” is more aspiration than documented performance.
Sharks, Risk, and the Statistical Baseline
To weigh Lulu’s Law intelligently, one has to look at the underlying risk. Sharks occupy an outsized place in public imagination—fed by decades of film and media—but serious bites are rare, and fatal bites rarer still. The Florida Fish and Wildlife Conservation Commission notes that on average fewer than ten people die from shark bites worldwide each year, while humans kill an estimated 100 million sharks annually through fisheries and bycatch. In Florida, shark bites are fatal less than one percent of the time, and a person is roughly 30 times more likely to be struck by lightning than bitten by a shark.
Alabama’s own data illustrate the low baseline. The Florida Museum of Natural History’s International Shark Attack File lists only around eight to ten confirmed unprovoked shark attacks in Alabama waters over roughly 180 years. Alabama’s coastal commissioner, Chris Blankenship, has been candid: he does not expect the state alert system to be used often and notes that, despite national media attention, no other state has contacted him about copying the model. In his view, the system is a precautionary tool for a very rare event, not a response to a chronic threat.
This statistical backdrop explains much of the expert skepticism. If shark attacks are so rare, and fatalities rarer still, is it worth adding a specialized national alert category—with all the operational and infrastructure implications—to warn about an event that most beachgoers will never encounter? And if, as marine scientists repeatedly stress, there are “no guaranteed ways to avoid shark bites,” though awareness of conditions and behavior can help, then how much marginal safety benefit can a post hoc text message deliver?
What Alerts Can and Cannot Do
The central claim of Lulu’s Law’s supporters is straightforward: timely knowledge of a nearby shark attack gives people a chance to get out of the water or avoid entering it, potentially preventing additional injuries. Survivors like Lulu emphasize that had they known about the earlier bite that same day, they would likely have altered their plans. That argument is intuitively compelling; it connects a communication gap to a concrete outcome.
Yet no primary-source data currently demonstrate that mobile alerts reduce shark attack injuries in practice. Alabama’s system only recently went live; there is no published analysis showing changes in incident rates or severity after implementation. The legislative record cites survivor testimony, common-sense reasoning, and analogies to Amber Alerts and weather warnings, but not peer-reviewed behavioral studies or randomized trials. The Congressional Budget Office’s assessment of H.R. 2076 focuses on administrative and rulemaking costs, not efficacy.
Mechanistically, the alerts are reactive: they trigger after an attack is confirmed. That limits them to preventing subsequent incidents in the same general area, not the initial event. In fast-moving, heavily used coastal waters, there is also a timing problem: verifying an attack, drafting an alert, defining the geofence, and pushing it through WEA all take minutes; in some cases, beach lifeguards and local loudspeaker systems may already be clearing the water before phones buzz. Conversely, on unguarded beaches—like the non-designated swim zone near the Navy facility in Panama City where a worker was critically injured in 2026—an alert might be the only formal communication available.
The more fundamental limitation is behavioral. There is no evidence yet on how many people would change their actions based on a shark alert compared with on-the-ground visual cues, social media posts, or news coverage. Research on other alerts suggests that overuse can breed complacency; one reason Alabama narrowed its system to confirmed unprovoked attacks was concern that routine “shark sighted” messages could lead people to start ignoring warnings entirely. For Lulu’s Law to deliver real safety benefits, agencies will need to strike a careful balance between sensitivity and specificity.
Redundancy and the Ecosystem of Shark Information
Another strand of critique points to redundancy. In several U.S. coastal regions, private and nonprofit apps—such as Sharktivity in the Northeast—already use tagged sharks, acoustic sensors, user reports, and GPS to map shark presence in near real time. Users who opt in can see when a tagged great white approaches a popular surf break, or when a confirmed bite has occurred nearby. From a technology perspective, these apps are often more granular than WEA, although they lack the universal reach of a cell broadcast pushed to all phones in a polygon.
Supporters of Lulu’s Law stress that the federal system is not intended to replace such apps; it is meant to be an additional tool, especially for tourists and casual beachgoers who are unlikely to have specialized shark-tracking apps installed. WEA alerts reach everyone with a modern phone, whether or not they ever thought to download an app. Still, this coexistence raises an important design question: how will public agencies coordinate their alerts with private data streams to avoid conflicting messages or gaps?
Beyond human safety, there is a larger shark policy context. In the past decade, U.S. legislators have passed measures like the Shark Conservation Act and the Shark Fin Sales Elimination Act, aimed at protecting shark populations from overexploitation and curbing fin trade. Those laws treat sharks primarily as vulnerable wildlife; Lulu’s Law treats them as a hazard requiring rapid human-focused alerts. Balancing conservation with risk communication will require care to avoid reinforcing inaccurate stereotypes of sharks as mindless killers, which can undermine public support for broader marine protections.
Policy Pattern: Trauma-Driven Safety Laws
Lulu’s Law fits a familiar pattern in American public safety policy: a traumatic, highly visible event triggers legislation named for the victim, framed as “commonsense,” and pushed with survivor testimony. The Jacob Wetterling Act and the creation of Amber Alerts after child abductions are classic examples. In each case, the underlying risk—child kidnapping, shark injury, rare drownings—is statistically small but psychologically overwhelming, and policymakers respond to the emotional salience more than to expected value calculations.
This does not mean such laws are empty symbolism. Amber Alerts, for instance, have documented successes, even if they do not transform the base rate of abductions. But it does mean these policies should be evaluated with the same rigor as any other intervention: What problem are they solving? What mechanisms do they rely on? How will we measure success or failure? Lulu’s Law currently rests on plausible reasoning and heartfelt advocacy, not on empirical evidence of harm reduction. Its next phase—FCC rulemaking and early deployments—should be treated as an opportunity for serious study, not just a victory lap.
Where the Real Debate Lies
Importantly, the counter-evidence surrounding Lulu’s Law does not dispute its basic facts. No one argues that the bill failed to pass, that Lulu’s injuries were exaggerated, or that the alert system misuses WEA technology. The criticisms focus instead on proportionality, redundancy, and opportunity cost. Experts highlight the low odds of shark attacks and question whether nationalizing a specialized alert category is the best use of public safety infrastructure. Agency documents and budget analyses are cautious, emphasizing rulemaking requirements but offering no endorsement of efficacy.
Supporters, including Lulu herself, respond not with data but with values: every avoidable injury matters; a simple alert could have spared them from trauma; and a bipartisan, survivor-led law can “unite both bodies of Congress” around a shared safety goal. For many citizens, that framing is compelling enough. For others, especially those attuned to risk statistics and cost-benefit analysis, it leaves open questions that only time, implementation, and study can answer.
What To Watch Next
For curious, skeptical adults trying to make sense of Lulu’s Law, the most consequential developments are still ahead. The FCC must translate the statute into detailed regulations: define “unprovoked shark attack,” set verification standards, specify who can trigger alerts, and design geofencing protocols that are tight enough to be useful but broad enough to capture real risk. Coastal states and localities must decide whether to opt in, how to integrate shark alerts with existing beach safety systems, and how to communicate with the public so that alerts are taken seriously but not feared as evidence of a pervasive threat.
Equally important will be independent evaluation. Marine scientists, behavioral researchers, and public safety experts are well-positioned to analyze incident data from Alabama and any other early adopters, compare outcomes before and after alert implementation, and study how beachgoers respond when their phones buzz with the word “shark.” Only with that kind of evidence can we move the conversation from intuition to knowledge—from “this feels like common sense” to “this demonstrably saves injuries, or it does not.”
Lulu’s story ensures that shark alerts will not fade quietly; her experience is now woven into both Alabama’s statutes and federal law. The task for the rest of us is to honor that courage without abandoning rigor—recognizing the visceral power of one teenager’s ordeal while insisting that national safety systems be built, and judged, on more than fear.
Lulu Gribbin was 15 when she survived a shark attack off the coast of Florida. Her story inspired new federal legislation to authorize emergency alerts to mobile phones to warn beachgoers when a shark has bitten someone in the area. https://t.co/3SsqXoCXBZ
— CBS Miami (@CBSMiami) July 2, 2026
Sources:
youtube.com, republicans-energycommerce.house.gov, britt.senate.gov, abcnews.com, aldailynews.com, trackbill.com, the-independent.com, mynbc15.com, facebook.com, sharksmart.nsw.gov.au, wral.com, awionline.org, instagram.com