Bill Text: IL HB4152 | 2021-2022 | 102nd General Assembly | Introduced


Bill Title: Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced - Dead) 2021-10-19 - Referred to Rules Committee [HB4152 Detail]

Download: Illinois-2021-HB4152-Introduced.html


102ND GENERAL ASSEMBLY
State of Illinois
2021 and 2022
HB4152

Introduced , by Rep. Lamont J. Robinson, Jr.

SYNOPSIS AS INTRODUCED:
105 ILCS 5/10-20.76 new
105 ILCS 5/34-18.70 new
110 ILCS 305/125 new
110 ILCS 520/105 new
110 ILCS 660/5-215 new
110 ILCS 665/10-215 new
110 ILCS 670/15-215 new
110 ILCS 675/20-220 new
110 ILCS 680/25-215 new
110 ILCS 685/30-225 new
110 ILCS 690/35-220 new
110 ILCS 805/3-29.15 new

Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately.
LRB102 19718 CMG 28492 b
FISCAL NOTE ACT MAY APPLY
STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT

A BILL FOR

HB4152LRB102 19718 CMG 28492 b
1 AN ACT concerning education.
2 Be it enacted by the People of the State of Illinois,
3represented in the General Assembly:
4 Section 5. The School Code is amended by adding Sections
510-20.76 and 34-18.70 as follows:
6 (105 ILCS 5/10-20.76 new)
7 Sec. 10-20.76. Cyber attack report. A school district must
8report a cyber attack to the State Board of Education as soon
9as school personnel determine that a security breach of the
10school district's computer network or system has occurred.
11 (105 ILCS 5/34-18.70 new)
12 Sec. 34-18.70. Cyber attack report. The school district
13must report a cyber attack to the State Board of Education as
14soon as school personnel determine that a security breach of
15the school district's computer network or system has occurred.
16 Section 10. The University of Illinois Act is amended by
17adding Section 125 as follows:
18 (110 ILCS 305/125 new)
19 Sec. 125. Cyber attack report. The University must report
20a cyber attack to the Department of Innovation and Technology

HB4152- 2 -LRB102 19718 CMG 28492 b
1as soon as University personnel determine that a security
2breach to the University's computer network or system has
3occurred.
4 Section 15. The Southern Illinois University Management
5Act is amended by adding Section 105 as follows:
6 (110 ILCS 520/105 new)
7 Sec. 105. Cyber attack report. The University must report
8a cyber attack to the Department of Innovation and Technology
9as soon as University personnel determine that a security
10breach to the University's computer network or system has
11occurred.
12 Section 20. The Chicago State University Law is amended by
13adding Section 5-215 as follows:
14 (110 ILCS 660/5-215 new)
15 Sec. 5-215. Cyber security attack report. The University
16must report a cyber attack to the Department of Innovation and
17Technology as soon as University personnel determine that a
18security breach to the University's computer network or system
19has occurred.
20 Section 25. The Eastern Illinois University Law is amended
21by adding Section 10-215 as follows:

HB4152- 3 -LRB102 19718 CMG 28492 b
1 (110 ILCS 665/10-215 new)
2 Sec. 10-215. Cyber security attack report. The University
3must report a cyber attack to the Department of Innovation and
4Technology as soon as University personnel determine that a
5security breach to the University's computer network or system
6has occurred.
7 Section 30. The Governors State University Law is amended
8by adding Section 15-215 as follows:
9 (110 ILCS 670/15-215 new)
10 Sec. 15-215. Cyber security attack report. The University
11must report a cyber attack to the Department of Innovation and
12Technology as soon as University personnel determine that a
13security breach to the University's computer network or system
14has occurred.
15 Section 35. The Illinois State University Law is amended
16by adding Section 20-220 as follows:
17 (110 ILCS 675/20-220 new)
18 Sec. 20-220. Cyber security attack report. The University
19must report a cyber attack to the Department of Innovation and
20Technology as soon as University personnel determine that a
21security breach to the University's computer network or system

HB4152- 4 -LRB102 19718 CMG 28492 b
1has occurred.
2 Section 40. The Northeastern Illinois University Law is
3amended by adding Section 25-215 as follows:
4 (110 ILCS 680/25-215 new)
5 Sec. 25-215. Cyber security attack report. The University
6must report a cyber attack to the Department of Innovation and
7Technology as soon as University personnel determine that a
8security breach to the University's computer network or system
9has occurred.
10 Section 45. The Northern Illinois University Law is
11amended by adding Section 30-225 as follows:
12 (110 ILCS 685/30-225 new)
13 Sec. 30-225. Cyber attack report. The University must
14report a cyber attack to the Department of Innovation and
15Technology as soon as University personnel determine that a
16security breach to the University's computer network or system
17has occurred.
18 Section 50. The Western Illinois University Law is amended
19by adding Section 35-220 as follows:
20 (110 ILCS 690/35-220 new)

HB4152- 5 -LRB102 19718 CMG 28492 b
1 Sec. 35-220. Cyber attack report. The University must
2report a cyber attack to the Department of Innovation and
3Technology as soon as University personnel determine that a
4security breach to the University's computer network or system
5has occurred.
6 Section 55. The Public Community College Act is amended by
7adding Section 3-29.15 as follows:
8 (110 ILCS 805/3-29.15 new)
9 Sec. 3-29.15. Cyber attack report. The community college
10district must report a cyber attack to the Department of
11Innovation and Technology as soon as college personnel
12determine that a security breach to the college's computer
13network or system has occurred.
14 Section 99. Effective date. This Act takes effect upon
15becoming law.
feedback