Bill Text: IL HB4152 | 2021-2022 | 102nd General Assembly | Introduced

---

Bill Title: Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced - Dead) 2021-10-19 - Referred to Rules Committee [HB4152 Detail]

Download: Illinois-2021-HB4152-Introduced.html

---

102ND GENERAL ASSEMBLY State of Illinois 2021 and 2022 HB4152 Introduced , by Rep. Lamont J. Robinson, Jr. SYNOPSIS AS INTRODUCED:
105 ILCS 5/10-20.76 new
105 ILCS 5/34-18.70 new
110 ILCS 305/125 new
110 ILCS 520/105 new
110 ILCS 660/5-215 new
110 ILCS 665/10-215 new
110 ILCS 670/15-215 new
110 ILCS 675/20-220 new
110 ILCS 680/25-215 new
110 ILCS 685/30-225 new
110 ILCS 690/35-220 new
110 ILCS 805/3-29.15 new
Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.
LRB102 19718 CMG 28492 b
FISCAL NOTE ACT MAY APPLY STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT
A BILL FOR
HB4152 LRB102 19718 CMG 28492 b
AN ACT concerning education.
Be it enacted by the People of the State of Illinois,
represented in the General Assembly:
Section 5. The School Code is amended by adding Sections
10-20.76 and 34-18.70 as follows:
(105 ILCS 5/10-20.76 new)
Sec. 10-20.76. Cyber attack report. A school district must
report a cyber attack to the State Board of Education as soon
as school personnel determine that a security breach of the
school district's computer network or system has occurred.
(105 ILCS 5/34-18.70 new)
Sec. 34-18.70. Cyber attack report. The school district
must report a cyber attack to the State Board of Education as
soon as school personnel determine that a security breach of
the school district's computer network or system has occurred.
Section 10. The University of Illinois Act is amended by
adding Section 125 as follows:
(110 ILCS 305/125 new)
Sec. 125. Cyber attack report. The University must report
a cyber attack to the Department of Innovation and Technology

HB4152 - 2 - LRB102 19718 CMG 28492 b
as soon as University personnel determine that a security
breach to the University's computer network or system has
occurred.
Section 15. The Southern Illinois University Management
Act is amended by adding Section 105 as follows:
(110 ILCS 520/105 new)
Sec. 105. Cyber attack report. The University must report
a cyber attack to the Department of Innovation and Technology
as soon as University personnel determine that a security
breach to the University's computer network or system has
occurred.
Section 20. The Chicago State University Law is amended by
adding Section 5-215 as follows:
(110 ILCS 660/5-215 new)
Sec. 5-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 25. The Eastern Illinois University Law is amended
by adding Section 10-215 as follows:

HB4152 - 3 - LRB102 19718 CMG 28492 b
(110 ILCS 665/10-215 new)
Sec. 10-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 30. The Governors State University Law is amended
by adding Section 15-215 as follows:
(110 ILCS 670/15-215 new)
Sec. 15-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 35. The Illinois State University Law is amended
by adding Section 20-220 as follows:
(110 ILCS 675/20-220 new)
Sec. 20-220. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system

HB4152 - 4 - LRB102 19718 CMG 28492 b
has occurred.
Section 40. The Northeastern Illinois University Law is
amended by adding Section 25-215 as follows:
(110 ILCS 680/25-215 new)
Sec. 25-215. Cyber security attack report. The University
must report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 45. The Northern Illinois University Law is
amended by adding Section 30-225 as follows:
(110 ILCS 685/30-225 new)
Sec. 30-225. Cyber attack report. The University must
report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 50. The Western Illinois University Law is amended
by adding Section 35-220 as follows:
(110 ILCS 690/35-220 new)

HB4152 - 5 - LRB102 19718 CMG 28492 b
Sec. 35-220. Cyber attack report. The University must
report a cyber attack to the Department of Innovation and
Technology as soon as University personnel determine that a
security breach to the University's computer network or system
has occurred.
Section 55. The Public Community College Act is amended by
adding Section 3-29.15 as follows:
(110 ILCS 805/3-29.15 new)
Sec. 3-29.15. Cyber attack report. The community college
district must report a cyber attack to the Department of
Innovation and Technology as soon as college personnel
determine that a security breach to the college's computer
network or system has occurred.
Section 99. Effective date. This Act takes effect upon
becoming law.