35266.
(a) A local educational agency shall report any cyberattack to the California Cybersecurity Integration Center, established by the Office of Emergency Services pursuant to Section 8586.5 of the Government Code.(b) (1) A local educational agency shall designate a cybersecurity coordinator to serve as a liaison in cybersecurity matters between the local educational agency and the California Cybersecurity Integration Center.
(2) The cybersecurity coordinator of a local educational agency shall notify the parent or legal guardian of a pupil that a cyberattack has occurred if records pertaining to the pupil may have been accessed.
(c) (1) The California Cybersecurity Integration Center shall establish a database that tracks reports of cyberattacks submitted by local educational agencies pursuant to this section. By July 1, 2021, and by each July 1 thereafter, the California Cybersecurity Integration Center shall report to the Legislature on the state of cybersecurity in the state’s local educational agencies, with recommendations for any improvements.
(2) A report to be submitted pursuant to paragraph (1) shall be submitted in compliance with Section 9795 of the Government Code.