HB2353 103RD GENERAL ASSEMBLY

LRB103 28623 RJT 55004 b

103RD GENERAL ASSEMBLY
State of Illinois
2023 and 2024
HB2353

Introduced 2/14/2023, by Rep. Lamont J. Robinson, Jr.

SYNOPSIS AS INTRODUCED:

105 ILCS 5/10-20.85 new
105 ILCS 5/34-18.82 new
110 ILCS 305/125 new
110 ILCS 520/105 new
110 ILCS 660/5-215 new
110 ILCS 665/10-215 new
110 ILCS 670/15-215 new
110 ILCS 675/20-220 new
110 ILCS 680/25-215 new
110 ILCS 685/30-225 new
110 ILCS 690/35-220 new
110 ILCS 805/3-29.15 new

Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.

STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY

A BILL FOR

AN ACT concerning education.

Be it enacted by the People of the State of Illinois, represented in the General Assembly:

Section 5. The School Code is amended by adding Sections 10-20.85 and 34-18.82 as follows:

(105 ILCS 5/10-20.85 new)

Sec. 10-20.85. Cyber attack report. A school district must report a cyber attack to the State Board of Education as soon as school personnel determine that a security breach of the school district's computer network or system has occurred.

(105 ILCS 5/34-18.82 new)

Sec. 34-18.82. Cyber attack report. A school district must report a cyber attack to the State Board of Education as soon as school personnel determine that a security breach of the school district's computer network or system has occurred.

Section 10. The University of Illinois Act is amended by adding Section 125 as follows:

(110 ILCS 305/125 new)

Sec. 125. Cyber attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 15. The Southern Illinois University Management Act is amended by adding Section 105 as follows:

(110 ILCS 520/105 new)

Sec. 105. Cyber attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 20. The Chicago State University Law is amended by adding Section 5-215 as follows:

(110 ILCS 660/5-215 new)

Sec. 5-215. Cyber security attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 25. The Eastern Illinois University Law is amended by adding Section 10-215 as follows:

(110 ILCS 665/10-215 new)

Sec. 10-215. Cyber security attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 30. The Governors State University Law is amended by adding Section 15-215 as follows:

(110 ILCS 670/15-215 new)

Sec. 15-215. Cyber security attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 35. The Illinois State University Law is amended by adding Section 20-220 as follows:

(110 ILCS 675/20-220 new)

Sec. 20-220. Cyber security attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 40. The Northeastern Illinois University Law is amended by adding Section 25-215 as follows:

(110 ILCS 680/25-215 new)

Sec. 25-215. Cyber security attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 45. The Northern Illinois University Law is amended by adding Section 30-225 as follows:

(110 ILCS 685/30-225 new)

Sec. 30-225. Cyber attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 50. The Western Illinois University Law is amended by adding Section 35-220 as follows:

(110 ILCS 690/35-220 new)

Sec. 35-220. Cyber attack report. The University must report a cyber attack to the Department of Innovation and Technology as soon as University personnel determine that a security breach to the University's computer network or system has occurred.

Section 55. The Public Community College Act is amended by adding Section 3-29.15 as follows:

(110 ILCS 805/3-29.15 new)

Sec. 3-29.15. Cyber attack report. The community college district must report a cyber attack to the Department of Innovation and Technology as soon as college personnel determine that a security breach to the college's computer network or system has occurred.

Section 99. Effective date. This Act takes effect upon becoming law.