103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB2353 Introduced , by Rep. Lamont J. Robinson, Jr. SYNOPSIS AS INTRODUCED: 105 ILCS 5/10-20.85 new105 ILCS 5/34-18.82 new110 ILCS 305/125 new110 ILCS 520/105 new110 ILCS 660/5-215 new110 ILCS 665/10-215 new110 ILCS 670/15-215 new110 ILCS 675/20-220 new110 ILCS 680/25-215 new110 ILCS 685/30-225 new110 ILCS 690/35-220 new110 ILCS 805/3-29.15 new Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately. LRB103 28623 RJT 55004 b STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY A BILL FOR 103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB2353 Introduced , by Rep. Lamont J. Robinson, Jr. SYNOPSIS AS INTRODUCED: 105 ILCS 5/10-20.85 new105 ILCS 5/34-18.82 new110 ILCS 305/125 new110 ILCS 520/105 new110 ILCS 660/5-215 new110 ILCS 665/10-215 new110 ILCS 670/15-215 new110 ILCS 675/20-220 new110 ILCS 680/25-215 new110 ILCS 685/30-225 new110 ILCS 690/35-220 new110 ILCS 805/3-29.15 new 105 ILCS 5/10-20.85 new 105 ILCS 5/34-18.82 new 110 ILCS 305/125 new 110 ILCS 520/105 new 110 ILCS 660/5-215 new 110 ILCS 665/10-215 new 110 ILCS 670/15-215 new 110 ILCS 675/20-220 new 110 ILCS 680/25-215 new 110 ILCS 685/30-225 new 110 ILCS 690/35-220 new 110 ILCS 805/3-29.15 new Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately. LRB103 28623 RJT 55004 b LRB103 28623 RJT 55004 b STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY A BILL FOR 103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB2353 Introduced , by Rep. Lamont J. Robinson, Jr. SYNOPSIS AS INTRODUCED: 105 ILCS 5/10-20.85 new105 ILCS 5/34-18.82 new110 ILCS 305/125 new110 ILCS 520/105 new110 ILCS 660/5-215 new110 ILCS 665/10-215 new110 ILCS 670/15-215 new110 ILCS 675/20-220 new110 ILCS 680/25-215 new110 ILCS 685/30-225 new110 ILCS 690/35-220 new110 ILCS 805/3-29.15 new 105 ILCS 5/10-20.85 new 105 ILCS 5/34-18.82 new 110 ILCS 305/125 new 110 ILCS 520/105 new 110 ILCS 660/5-215 new 110 ILCS 665/10-215 new 110 ILCS 670/15-215 new 110 ILCS 675/20-220 new 110 ILCS 680/25-215 new 110 ILCS 685/30-225 new 110 ILCS 690/35-220 new 110 ILCS 805/3-29.15 new 105 ILCS 5/10-20.85 new 105 ILCS 5/34-18.82 new 110 ILCS 305/125 new 110 ILCS 520/105 new 110 ILCS 660/5-215 new 110 ILCS 665/10-215 new 110 ILCS 670/15-215 new 110 ILCS 675/20-220 new 110 ILCS 680/25-215 new 110 ILCS 685/30-225 new 110 ILCS 690/35-220 new 110 ILCS 805/3-29.15 new Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately. LRB103 28623 RJT 55004 b LRB103 28623 RJT 55004 b LRB103 28623 RJT 55004 b STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY A BILL FOR HB2353LRB103 28623 RJT 55004 b HB2353 LRB103 28623 RJT 55004 b HB2353 LRB103 28623 RJT 55004 b 1 AN ACT concerning education. 2 Be it enacted by the People of the State of Illinois, 3 represented in the General Assembly: 4 Section 5. The School Code is amended by adding Sections 5 10-20.85 and 34-18.82 as follows: 6 (105 ILCS 5/10-20.85 new) 7 Sec. 10-20.85. Cyber attack report. A school district must 8 report a cyber attack to the State Board of Education as soon 9 as school personnel determine that a security breach of the 10 school district's computer network or system has occurred. 11 (105 ILCS 5/34-18.82 new) 12 Sec. 34-18.82. Cyber attack report. A school district must 13 report a cyber attack to the State Board of Education as soon 14 as school personnel determine that a security breach of the 15 school district's computer network or system has occurred. 16 Section 10. The University of Illinois Act is amended by 17 adding Section 125 as follows: 18 (110 ILCS 305/125 new) 19 Sec. 125. Cyber attack report. The University must report 20 a cyber attack to the Department of Innovation and Technology 103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB2353 Introduced , by Rep. Lamont J. Robinson, Jr. SYNOPSIS AS INTRODUCED: 105 ILCS 5/10-20.85 new105 ILCS 5/34-18.82 new110 ILCS 305/125 new110 ILCS 520/105 new110 ILCS 660/5-215 new110 ILCS 665/10-215 new110 ILCS 670/15-215 new110 ILCS 675/20-220 new110 ILCS 680/25-215 new110 ILCS 685/30-225 new110 ILCS 690/35-220 new110 ILCS 805/3-29.15 new 105 ILCS 5/10-20.85 new 105 ILCS 5/34-18.82 new 110 ILCS 305/125 new 110 ILCS 520/105 new 110 ILCS 660/5-215 new 110 ILCS 665/10-215 new 110 ILCS 670/15-215 new 110 ILCS 675/20-220 new 110 ILCS 680/25-215 new 110 ILCS 685/30-225 new 110 ILCS 690/35-220 new 110 ILCS 805/3-29.15 new 105 ILCS 5/10-20.85 new 105 ILCS 5/34-18.82 new 110 ILCS 305/125 new 110 ILCS 520/105 new 110 ILCS 660/5-215 new 110 ILCS 665/10-215 new 110 ILCS 670/15-215 new 110 ILCS 675/20-220 new 110 ILCS 680/25-215 new 110 ILCS 685/30-225 new 110 ILCS 690/35-220 new 110 ILCS 805/3-29.15 new Amends the School Code to require a school district to report a cyber security attack to the State Board of Education as soon as school personnel determine that a breach of the school district's computer system or network has occurred. Amends various Acts relating to the governance of public universities and community colleges in Illinois to require a public university or community college district to report a cyber security attack to the Department of Innovation and Technology as soon as school personnel determine that a breach of the computer system or network has occurred. Effective immediately. LRB103 28623 RJT 55004 b LRB103 28623 RJT 55004 b LRB103 28623 RJT 55004 b STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY A BILL FOR 105 ILCS 5/10-20.85 new 105 ILCS 5/34-18.82 new 110 ILCS 305/125 new 110 ILCS 520/105 new 110 ILCS 660/5-215 new 110 ILCS 665/10-215 new 110 ILCS 670/15-215 new 110 ILCS 675/20-220 new 110 ILCS 680/25-215 new 110 ILCS 685/30-225 new 110 ILCS 690/35-220 new 110 ILCS 805/3-29.15 new LRB103 28623 RJT 55004 b STATE MANDATES ACT MAY REQUIRE REIMBURSEMENT MAY APPLY HB2353 LRB103 28623 RJT 55004 b HB2353- 2 -LRB103 28623 RJT 55004 b HB2353 - 2 - LRB103 28623 RJT 55004 b HB2353 - 2 - LRB103 28623 RJT 55004 b 1 as soon as University personnel determine that a security 2 breach to the University's computer network or system has 3 occurred. 4 Section 15. The Southern Illinois University Management 5 Act is amended by adding Section 105 as follows: 6 (110 ILCS 520/105 new) 7 Sec. 105. Cyber attack report. The University must report 8 a cyber attack to the Department of Innovation and Technology 9 as soon as University personnel determine that a security 10 breach to the University's computer network or system has 11 occurred. 12 Section 20. The Chicago State University Law is amended by 13 adding Section 5-215 as follows: 14 (110 ILCS 660/5-215 new) 15 Sec. 5-215. Cyber security attack report. The University 16 must report a cyber attack to the Department of Innovation and 17 Technology as soon as University personnel determine that a 18 security breach to the University's computer network or system 19 has occurred. 20 Section 25. The Eastern Illinois University Law is amended 21 by adding Section 10-215 as follows: HB2353 - 2 - LRB103 28623 RJT 55004 b HB2353- 3 -LRB103 28623 RJT 55004 b HB2353 - 3 - LRB103 28623 RJT 55004 b HB2353 - 3 - LRB103 28623 RJT 55004 b 1 (110 ILCS 665/10-215 new) 2 Sec. 10-215. Cyber security attack report. The University 3 must report a cyber attack to the Department of Innovation and 4 Technology as soon as University personnel determine that a 5 security breach to the University's computer network or system 6 has occurred. 7 Section 30. The Governors State University Law is amended 8 by adding Section 15-215 as follows: 9 (110 ILCS 670/15-215 new) 10 Sec. 15-215. Cyber security attack report. The University 11 must report a cyber attack to the Department of Innovation and 12 Technology as soon as University personnel determine that a 13 security breach to the University's computer network or system 14 has occurred. 15 Section 35. The Illinois State University Law is amended 16 by adding Section 20-220 as follows: 17 (110 ILCS 675/20-220 new) 18 Sec. 20-220. Cyber security attack report. The University 19 must report a cyber attack to the Department of Innovation and 20 Technology as soon as University personnel determine that a 21 security breach to the University's computer network or system HB2353 - 3 - LRB103 28623 RJT 55004 b HB2353- 4 -LRB103 28623 RJT 55004 b HB2353 - 4 - LRB103 28623 RJT 55004 b HB2353 - 4 - LRB103 28623 RJT 55004 b 1 has occurred. 2 Section 40. The Northeastern Illinois University Law is 3 amended by adding Section 25-215 as follows: 4 (110 ILCS 680/25-215 new) 5 Sec. 25-215. Cyber security attack report. The University 6 must report a cyber attack to the Department of Innovation and 7 Technology as soon as University personnel determine that a 8 security breach to the University's computer network or system 9 has occurred. 10 Section 45. The Northern Illinois University Law is 11 amended by adding Section 30-225 as follows: 12 (110 ILCS 685/30-225 new) 13 Sec. 30-225. Cyber attack report. The University must 14 report a cyber attack to the Department of Innovation and 15 Technology as soon as University personnel determine that a 16 security breach to the University's computer network or system 17 has occurred. 18 Section 50. The Western Illinois University Law is amended 19 by adding Section 35-220 as follows: 20 (110 ILCS 690/35-220 new) HB2353 - 4 - LRB103 28623 RJT 55004 b HB2353- 5 -LRB103 28623 RJT 55004 b HB2353 - 5 - LRB103 28623 RJT 55004 b HB2353 - 5 - LRB103 28623 RJT 55004 b 1 Sec. 35-220. Cyber attack report. The University must 2 report a cyber attack to the Department of Innovation and 3 Technology as soon as University personnel determine that a 4 security breach to the University's computer network or system 5 has occurred. 6 Section 55. The Public Community College Act is amended by 7 adding Section 3-29.15 as follows: 8 (110 ILCS 805/3-29.15 new) 9 Sec. 3-29.15. Cyber attack report. The community college 10 district must report a cyber attack to the Department of 11 Innovation and Technology as soon as college personnel 12 determine that a security breach to the college's computer 13 network or system has occurred. 14 Section 99. Effective date. This Act takes effect upon 15 becoming law. HB2353 - 5 - LRB103 28623 RJT 55004 b