Bill Text: IL HB2353 | 2023-2024 | 103rd General Assembly | Introduced

---

Bill Title: Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced) 2023-02-14 - Referred to Rules Committee [HB2353 Detail]

Download: Illinois-2023-HB2353-Introduced.html

---

103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB2353 Introduced , by Rep. Lamont J. Robinson, Jr. SYNOPSIS AS INTRODUCED:
105 ILCS 5/10-20.85 new
105 ILCS 5/34-18.82 new
110 ILCS 305/125 new
110 ILCS 520/105 new
110 ILCS 660/5-215 new
110 ILCS 665/10-215 new
110 ILCS 670/15-215 new
110 ILCS 675/20-220 new
110 ILCS 680/25-215 new
110 ILCS 685/30-225 new
110 ILCS 690/35-220 new
110 ILCS 805/3-29.15 new
Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.
LRB103 28623 RJT 55004 b
STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY
A BILL FOR
HB2353 LRB103 28623 RJT 55004 b
AN ACT concerning education.
Be it enacted by the People of the State of Illinois,
represented in the General Assembly:
Section 5. The School Code is amended by adding Sections
10-20.85 and 34-18.82 as follows:
(105 ILCS 5/10-20.85 new)
Sec. 10-20.85. Cyber attack report. A school district must
report a cyber attack to the State Board of Education as soon
as school personnel determine that a security breach of the
school district's computer network or system has occurred.
(105 ILCS 5/34-18.82 new)
Sec. 34-18.82. Cyber attack report. A school district must
report a cyber attack to the State Board of Education as soon
as school personnel determine that a security breach of the
school district's computer network or system has occurred.
Section 10. The University of Illinois Act is amended by
adding Section 125 as follows:
(110 ILCS 305/125 new)
Sec. 125. Cyber attack report. The University must report
a cyber attack to the Department of Innovation and Technology

HB2353 - 2 - LRB103 28623 RJT 55004 b
as soon as University personnel determine that a security
breach to the University's computer network or system has
occurred.
Section 15. The Southern Illinois University Management
Act is amended by adding Section 105 as follows:
(110 ILCS 520/105 new)
Sec. 105. Cyber attack report. The University must report
a cyber attack to the Department of Innovation and Technology
as soon as University personnel determine that a security
breach to the University's computer network or system has
occurred.
Section 20. The Chicago State University Law is amended by
adding Section 5-215 as follows:
(110 ILCS 660/5-215 new)
Sec. 5-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 25. The Eastern Illinois University Law is amended
by adding Section 10-215 as follows:

HB2353 - 3 - LRB103 28623 RJT 55004 b
(110 ILCS 665/10-215 new)
Sec. 10-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 30. The Governors State University Law is amended
by adding Section 15-215 as follows:
(110 ILCS 670/15-215 new)
Sec. 15-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 35. The Illinois State University Law is amended
by adding Section 20-220 as follows:
(110 ILCS 675/20-220 new)
Sec. 20-220. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system

HB2353 - 4 - LRB103 28623 RJT 55004 b
has occurred.
Section 40. The Northeastern Illinois University Law is
amended by adding Section 25-215 as follows:
(110 ILCS 680/25-215 new)
Sec. 25-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 45. The Northern Illinois University Law is
amended by adding Section 30-225 as follows:
(110 ILCS 685/30-225 new)
Sec. 30-225. Cyber attack report. The University must
report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 50. The Western Illinois University Law is amended
by adding Section 35-220 as follows:
(110 ILCS 690/35-220 new)

HB2353 - 5 - LRB103 28623 RJT 55004 b
Sec. 35-220. Cyber attack report. The University must
report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 55. The Public Community College Act is amended by
adding Section 3-29.15 as follows:
(110 ILCS 805/3-29.15 new)
Sec. 3-29.15. Cyber attack report. The community college
district must report a cyber attack to the Department of
Innovation and Technology as soon as college personnel
determine that a security breach to the college's computer
network or system has occurred.
Section 99. Effective date. This Act takes effect upon
becoming law.