103RD GENERAL ASSEMBLY
State of Illinois
2023 and 2024
HB2353
 
Introduced , by Rep. Lamont J. Robinson, Jr.
 
SYNOPSIS AS INTRODUCED:



105 ILCS 5/10-20.85 new
105 ILCS 5/34-18.82 new
110 ILCS 305/125 new
110 ILCS 520/105 new
110 ILCS 660/5-215 new
110 ILCS 665/10-215 new
110 ILCS 670/15-215 new
110 ILCS 675/20-220 new
110 ILCS 680/25-215 new
110 ILCS 685/30-225 new
110 ILCS 690/35-220 new
110 ILCS 805/3-29.15 new

 Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.



LRB103 28623 RJT 55004 b


STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT
MAY APPLY

 
 
A BILL FOR
 


HB2353LRB103 28623 RJT 55004 b



1 AN ACT concerning education.


2 Be it enacted by the People of the State of Illinois,

3represented in the General Assembly:



4 Section 5. The School Code is amended by adding Sections 
510-20.85 and 34-18.82 as follows:

6 (105 ILCS 5/10-20.85 new)
7 Sec. 10-20.85. Cyber attack report. A school district must 
8report a cyber attack to the State Board of Education as soon 
9as school personnel determine that a security breach of the 
10school district's computer network or system has occurred.

11 (105 ILCS 5/34-18.82 new)
12 Sec. 34-18.82. Cyber attack report. A school district must 
13report a cyber attack to the State Board of Education as soon 
14as school personnel determine that a security breach of the 
15school district's computer network or system has occurred.

16 Section 10. The University of Illinois Act is amended by 
17adding Section 125 as follows:

18 (110 ILCS 305/125 new)
19 Sec. 125. Cyber attack report. The University must report 
20a cyber attack to the Department of Innovation and Technology 
 
 
HB2353- 2 -LRB103 28623 RJT 55004 b


1as soon as University personnel determine that a security 
2breach to the University's computer network or system has 
3occurred.

4 Section 15. The Southern Illinois University Management 
5Act is amended by adding Section 105 as follows:

6 (110 ILCS 520/105 new)
7 Sec. 105. Cyber attack report. The University must report 
8a cyber attack to the Department of Innovation and Technology 
9as soon as University personnel determine that a security 
10breach to the University's computer network or system has 
11occurred.

12 Section 20. The Chicago State University Law is amended by 
13adding Section 5-215 as follows:

14 (110 ILCS 660/5-215 new)
15 Sec. 5-215. Cyber security attack report. The University 
16must report a cyber attack to the Department of Innovation and 
17Technology as soon as University personnel determine that a 
18security breach to the University's computer network or system 
19has occurred.

20 Section 25. The Eastern Illinois University Law is amended 
21by adding Section 10-215 as follows:

 
 
HB2353- 3 -LRB103 28623 RJT 55004 b


1 (110 ILCS 665/10-215 new)
2 Sec. 10-215. Cyber security attack report. The University 
3must report a cyber attack to the Department of Innovation and 
4Technology as soon as University personnel determine that a 
5security breach to the University's computer network or system 
6has occurred.

7 Section 30. The Governors State University Law is amended 
8by adding Section 15-215 as follows:

9 (110 ILCS 670/15-215 new)
10 Sec. 15-215. Cyber security attack report. The University 
11must report a cyber attack to the Department of Innovation and 
12Technology as soon as University personnel determine that a 
13security breach to the University's computer network or system 
14has occurred.

15 Section 35. The Illinois State University Law is amended 
16by adding Section 20-220 as follows:

17 (110 ILCS 675/20-220 new)
18 Sec. 20-220. Cyber security attack report. The University 
19must report a cyber attack to the Department of Innovation and 
20Technology as soon as University personnel determine that a 
21security breach to the University's computer network or system 
 
 
HB2353- 4 -LRB103 28623 RJT 55004 b


1has occurred.

2 Section 40. The Northeastern Illinois University Law is 
3amended by adding Section 25-215 as follows:

4 (110 ILCS 680/25-215 new)
5 Sec. 25-215. Cyber security attack report. The University 
6must report a cyber attack to the Department of Innovation and 
7Technology as soon as University personnel determine that a 
8security breach to the University's computer network or system 
9has occurred.

10 Section 45. The Northern Illinois University Law is 
11amended by adding Section 30-225 as follows:

12 (110 ILCS 685/30-225 new)
13 Sec. 30-225. Cyber attack report. The University must 
14report a cyber attack to the Department of Innovation and 
15Technology as soon as University personnel determine that a 
16security breach to the University's computer network or system 
17has occurred.

18 Section 50. The Western Illinois University Law is amended 
19by adding Section 35-220 as follows:

20 (110 ILCS 690/35-220 new)
 
 
HB2353- 5 -LRB103 28623 RJT 55004 b


1 Sec. 35-220. Cyber attack report. The University must 
2report a cyber attack to the Department of Innovation and 
3Technology as soon as University personnel determine that a 
4security breach to the University's computer network or system 
5has occurred.

6 Section 55. The Public Community College Act is amended by 
7adding Section 3-29.15 as follows:

8 (110 ILCS 805/3-29.15 new)
9 Sec. 3-29.15. Cyber attack report. The community college 
10district must report a cyber attack to the Department of 
11Innovation and Technology as soon as college personnel 
12determine that a security breach to the college's computer 
13network or system has occurred.


14 Section 99. Effective date. This Act takes effect upon 
15becoming law.