103RD GENERAL ASSEMBLY
State of Illinois
2023 and 2024
HB2353

 

Introduced 2/14/2023, by Rep. Lamont J. Robinson, Jr.

 

SYNOPSIS AS INTRODUCED:
 
105 ILCS 5/10-20.85 new
105 ILCS 5/34-18.82 new
110 ILCS 305/125 new
110 ILCS 520/105 new
110 ILCS 660/5-215 new
110 ILCS 665/10-215 new
110 ILCS 670/15-215 new
110 ILCS 675/20-220 new
110 ILCS 680/25-215 new
110 ILCS 685/30-225 new
110 ILCS 690/35-220 new
110 ILCS 805/3-29.15 new

    Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.


LRB103 28623 RJT 55004 b

STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT
MAY APPLY

 

 

A BILL FOR

 

HB2353LRB103 28623 RJT 55004 b

1    AN ACT concerning education.
 
2    Be it enacted by the People of the State of Illinois,
3represented in the General Assembly:
 
4    Section 5. The School Code is amended by adding Sections
510-20.85 and 34-18.82 as follows:
 
6    (105 ILCS 5/10-20.85 new)
7    Sec. 10-20.85. Cyber attack report. A school district must
8report a cyber attack to the State Board of Education as soon
9as school personnel determine that a security breach of the
10school district's computer network or system has occurred.
 
11    (105 ILCS 5/34-18.82 new)
12    Sec. 34-18.82. Cyber attack report. A school district must
13report a cyber attack to the State Board of Education as soon
14as school personnel determine that a security breach of the
15school district's computer network or system has occurred.
 
16    Section 10. The University of Illinois Act is amended by
17adding Section 125 as follows:
 
18    (110 ILCS 305/125 new)
19    Sec. 125. Cyber attack report. The University must report
20a cyber attack to the Department of Innovation and Technology

 

 

HB2353- 2 -LRB103 28623 RJT 55004 b

1as soon as University personnel determine that a security
2breach to the University's computer network or system has
3occurred.
 
4    Section 15. The Southern Illinois University Management
5Act is amended by adding Section 105 as follows:
 
6    (110 ILCS 520/105 new)
7    Sec. 105. Cyber attack report. The University must report
8a cyber attack to the Department of Innovation and Technology
9as soon as University personnel determine that a security
10breach to the University's computer network or system has
11occurred.
 
12    Section 20. The Chicago State University Law is amended by
13adding Section 5-215 as follows:
 
14    (110 ILCS 660/5-215 new)
15    Sec. 5-215. Cyber security attack report. The University
16must report a cyber attack to the Department of Innovation and
17Technology as soon as University personnel determine that a
18security breach to the University's computer network or system
19has occurred.
 
20    Section 25. The Eastern Illinois University Law is amended
21by adding Section 10-215 as follows:
 

 

 

HB2353- 3 -LRB103 28623 RJT 55004 b

1    (110 ILCS 665/10-215 new)
2    Sec. 10-215. Cyber security attack report. The University
3must report a cyber attack to the Department of Innovation and
4Technology as soon as University personnel determine that a
5security breach to the University's computer network or system
6has occurred.
 
7    Section 30. The Governors State University Law is amended
8by adding Section 15-215 as follows:
 
9    (110 ILCS 670/15-215 new)
10    Sec. 15-215. Cyber security attack report. The University
11must report a cyber attack to the Department of Innovation and
12Technology as soon as University personnel determine that a
13security breach to the University's computer network or system
14has occurred.
 
15    Section 35. The Illinois State University Law is amended
16by adding Section 20-220 as follows:
 
17    (110 ILCS 675/20-220 new)
18    Sec. 20-220. Cyber security attack report. The University
19must report a cyber attack to the Department of Innovation and
20Technology as soon as University personnel determine that a
21security breach to the University's computer network or system

 

 

HB2353- 4 -LRB103 28623 RJT 55004 b

1has occurred.
 
2    Section 40. The Northeastern Illinois University Law is
3amended by adding Section 25-215 as follows:
 
4    (110 ILCS 680/25-215 new)
5    Sec. 25-215. Cyber security attack report. The University
6must report a cyber attack to the Department of Innovation and
7Technology as soon as University personnel determine that a
8security breach to the University's computer network or system
9has occurred.
 
10    Section 45. The Northern Illinois University Law is
11amended by adding Section 30-225 as follows:
 
12    (110 ILCS 685/30-225 new)
13    Sec. 30-225. Cyber attack report. The University must
14report a cyber attack to the Department of Innovation and
15Technology as soon as University personnel determine that a
16security breach to the University's computer network or system
17has occurred.
 
18    Section 50. The Western Illinois University Law is amended
19by adding Section 35-220 as follows:
 
20    (110 ILCS 690/35-220 new)

 

 

HB2353- 5 -LRB103 28623 RJT 55004 b

1    Sec. 35-220. Cyber attack report. The University must
2report a cyber attack to the Department of Innovation and
3Technology as soon as University personnel determine that a
4security breach to the University's computer network or system
5has occurred.
 
6    Section 55. The Public Community College Act is amended by
7adding Section 3-29.15 as follows:
 
8    (110 ILCS 805/3-29.15 new)
9    Sec. 3-29.15. Cyber attack report. The community college
10district must report a cyber attack to the Department of
11Innovation and Technology as soon as college personnel
12determine that a security breach to the college's computer
13network or system has occurred.
 
14    Section 99. Effective date. This Act takes effect upon
15becoming law.