Effective Date: September 1, 2021

Requires the TEA to coordinate with the Department of Information Resources (DIR) to establish and maintain a system to coordinate the anonymous sharing of cyber attacks or cybersecurity incidents between participating school districts, charter schools, and the state. It requires that the system captures each report and that reports can be shared between schools, preferably in real time. The system must also preserve the anonymity of the reporting school. The TEA is permitted to contract with a qualified third party to administer the system. The commissioner of education must adopt rules to implement this system.

A school district or open-enrollment charter school is required to report to the TEA, or to the system, any cyber attack or cybersecurity incident against the school's infrastructure that constitutes a breach of system security as soon as possible after the discovery.