Texas 2019 - 86th Regular

Texas Senate Bill SB820 Compare Versions

Version 1 (Old)

Version 2 (New)

Old	New		Differences
1		-	S.B. No. 820
	1	+	86R32465 TSS-D
	2	+	By: Nelson, et al. S.B. No. 820
	3	+	(Meyer)
	4	+	Substitute the following for S.B. No. 820: No.
2	5
3	6
	7	+	A BILL TO BE ENTITLED
4	8		AN ACT
5	9		relating to a requirement that a school district adopt a
6	10		cybersecurity policy.
7	11		BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
8	12		SECTION 1. Subchapter D, Chapter 11, Education Code, is
9	13		amended by adding Section 11.175 to read as follows:
10	14		Sec. 11.175. DISTRICT CYBERSECURITY. (a) In this section:
11		-	(1) "Breach of system security" means an incident in which
12		-	student information that is sensitive, protected, or confidential,
13		-	as provided by state or federal law, is stolen or copied,
14		-	transmitted, viewed, or used by a person unauthorized to engage in
15		-	that action.
16		-	(2) "Cyber attack" means an attempt to damage,
	15	+	(1) "Cyber attack" means an attempt to damage,
17	16		disrupt, or gain unauthorized access to a computer, computer
18	17		network, or computer system.
19		-	(3) "Cybersecurity" means the measures taken to
	18	+	(2) "Cybersecurity" means the measures taken to
20	19		protect a computer, computer network, or computer system against
21	20		unauthorized use or access.
22	21		(b) Each school district shall adopt a cybersecurity policy
23	22		to:
24	23		(1) secure district cyberinfrastructure against cyber
25	24		attacks and other cybersecurity incidents; and
26	25		(2) determine cybersecurity risk and implement
27	26		mitigation planning.
28	27		(c) A school district's cybersecurity policy may not
29	28		conflict with the information security standards for institutions
30	29		of higher education adopted by the Department of Information
31	30		Resources under Chapters 2054 and 2059, Government Code.
32	31		(d) The superintendent of each school district shall
33	32		designate a cybersecurity coordinator to serve as a liaison between
34	33		the district and the agency in cybersecurity matters.
35	34		(e) The district's cybersecurity coordinator shall report
36	35		to the agency any cyber attack or other cybersecurity incident
37	36		against the district cyberinfrastructure that constitutes a breach
38		-	of system security as soon as practicable after the discovery of the
	37	+	of system security as defined by Section 521.053, Business &
	38	+	Commerce Code, as soon as practicable after the discovery of the
39	39		attack or incident.
40		-	(f) The district's cybersecurity coordinator shall provide
41		-	notice to a parent of or person standing in parental relation to a
42		-	student enrolled in the district of an attack or incident for which
43		-	a report is required under Subsection (e) involving the student's
44		-	information.
45	40		SECTION 2. This Act takes effect September 1, 2019.
46		-	______________________________ ______________________________
47		-	President of the Senate Speaker of the House
48		-	I hereby certify that S.B. No. 820 passed the Senate on
49		-	April 26, 2019, by the following vote: Yeas 30, Nays 0; and that
50		-	the Senate concurred in House amendments on May 25, 2019, by the
51		-	following vote: Yeas 30, Nays 0.
52		-	______________________________
53		-	Secretary of the Senate
54		-	I hereby certify that S.B. No. 820 passed the House, with
55		-	amendments, on May 22, 2019, by the following vote: Yeas 133,
56		-	Nays 10, two present not voting.
57		-	______________________________
58		-	Chief Clerk of the House
59		-	Approved:
60		-	______________________________
61		-	Date
62		-	______________________________
63		-	Governor