Texas Law Requires Districts to Plan for Cyberattacks. Will Other States Follow?

By Maggie Campbell — August 22, 2019 3 min read
  • Save to favorites
  • Print

A new Texas law will require school districts to take steps to guard against cyberattacks, in what is one of the few state-level policies put in place to guard against the growing online threat.

The law, which takes effect Sept. 1, requires districts to develop plans to protect online infrastructure from attacks, make determinations of cybersecurity risk and respond accordingly, and designate a cybersecurity coordinator who will be a liaison between the Texas Education Agency and the district.

Joy Baskin, director of legal services of Texas Association of School Boards, said the new law will push K-12 systems toward having a basic understanding about the need for effective practices in cybersecurity.

“The goal, of course, is to raise awareness among school districts and other local government entities about the need to have cybersecurity policies and to have...somebody on staff who is dedicated to keeping up with and overseeing cybersecurity within the school district,” Baskin said

A number of K-12 organizations, like the Consortium for School Networking, have sought to spread the word on cybersecurity best practices in school districts.

Yet even as cyberattacks and ransomware affecting K-12 systems have become more common, few states have approved legislation aimed at combatting the threat, leaving it in most cases to districts to develop protections, said Doug Levin, president of EdTech Strategies, LLC, a consulting firm.

Some states, like Arkansas, New York, Indiana, Missouri, and North Dakota, have begun taking steps towards better training and support for districts, he noted. Louisiana even declared a state of emergency following malware attacks on three school districts.

The Texas law is “common-sense legislation in that it tries to build the foundation for being able to make better decisions in the future,” Levin said.

Yet while the new policy provides important guidance to districts, it should have gone further in defining what classifies as a cybersecurity incident, argued Levin.

As it now stands, districts could be inclined to report minor cyber incidents and blow them out of proportion, for fear of being penalized for not notifying the state. Or they could choose not to report attacks because they’re afraid of having a stigma attached to their school system.

“It’s going to be important for the state to settle on a definition of what a significant incident is,” Levin said.

Where Are the Resources?

Levin also believes the law falls short when it comes to providing financial resources for districts to pay for cybersecurity needs, expertise, and access to information about real-time threats.

Districts and states invest heavily in spending on educational technology, but cybersecurity does not seem to be a priority in their budgets, he said.

According to Baskin, one benefit of the legislation is that the Texas Education Agency will be able to push out specialized content for districts about cybersecurity because of its connection with district coordinators charged with overseeing the issue.

Some federal laws focus on protecting students’ online privacy, most notably the Family Educational Rights and Privacy Act, or FERPA. But the law makes has no mention of cybersecurity practices.

Levin says he would like to see federal guidance or legislation for schools that “sets a floor for cybersecurity practices.”

Baskin hopes the Texas law encourages districts to use existing resources on cybersecurity practices made available through the state, such as through the Texas Department of Information Resources, so districts can get training and guidance on safeguards that should be in place.

“It’s just a matter of facilitating, trickling that information down to the local level,” she said.

The goal “is not necessarily more mandates from the legislature,” she added, “but more technical support from the state wherever possible.”

See also:

A version of this news article first appeared in the Digital Education blog.

Commenting has been disabled on effective Sept. 8. Please visit our FAQ section for more details. To get in touch with us visit our contact page, follow us on social media, or submit a Letter to the Editor.


This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Teaching Webinar
6 Key Trends in Teaching and Learning
As we enter the third school year affected by the pandemic—and a return to the classroom for many—we come better prepared, but questions remain. How will the last year impact teaching and learning this school
Content provided by Instructure
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
School & District Management Webinar
Ensuring Continuity of Learning: How to Prepare for the Next Disruption
Across the country, K-12 schools and districts are, again, considering how to ensure effective continuity of learning in the face of emerging COVID variants, politicized debates, and more. Learn from Alexandria City Public Schools superintendent
Content provided by Class
Teaching Profession Live Online Discussion What Have We Learned From Teachers During the Pandemic?
University of California, Santa Cruz, researcher Lora Bartlett and her colleagues spent months studying how the pandemic affected classroom teachers. We will discuss the takeaways from her research not only for teachers, but also for

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

States During Site Visit From Cardona, Illinois Governor Defends Vaccine, Testing Policies
“The testing regimen is there in order to make sure that they’re not entering the institution where they work and spreading COVID-19.”
Karen Ann Cullotta, Chicago Tribune
3 min read
The Student Council lead the creation of “sensory hallways” at Western Branch Middle School in Chesapeake, Va.
U.S. Secretary of Education Miguel Cardona looks on as Gov. J.B. Pritzker speaks with reporters after touring Access Hawthorne Family Health Center, which is offering COVID-19 vaccines at 3040 S. Cicero Ave. in Cicero, as part of the Department of Education's "Return to School Road Trip" events in the Chicago area, Tuesday afternoon, Sept. 21, 2021.
Ashlee Rezin/Chicago Sun-Times via AP
States Kentucky Ends All Statewide Mask Mandates After Governor's Vetoes Overridden
The Republican-led legislation strips the Democratic governor's ability to issue statewide mask mandates in schools or anywhere else.
Jack Brammer and Alex Acquisto, Lexington Herald-Leader
4 min read
In this Wednesday, Sept. 23, 2020, file photo, Kentucky Governor Andy Beshear addresses the media in Frankfort, Ky. Kentucky's governor said Sunday, Oct. 11, that he will quarantine after a member of his security detail who drove with his family the day before later tested positive for COVID-19. Democratic Gov. Andy Beshear said he and his family feel fine, show no coronavirus symptoms and have tested negative for the virus.
In this Sept. 23, 2020, file photo, Kentucky Governor Andy Beshear addresses the media in Frankfort, Ky.
Timothy D. Easley/AP
States Bill to Restrict How Race and Racism Is Taught in Schools Headed to Texas Governor
If the "critical race theory" bill sounds familiar, that's because lawmakers passed a similar one during the regular legislative session.
Eleanor Dearman, Fort Worth Star-Telegram
4 min read
Texas Gov. Greg Abbott speaks at a news conference in Austin, Texas, on June 8, 2021.
Texas Gov. Greg Abbott speaks at a news conference in Austin, Texas, on June 8, 2021.
Eric Gay/AP
States Infographic Which States Are Reporting COVID-19 Cases in Schools?
Some states are reporting the number of COVID-19 cases in their schools and districts. Use this table to find your state's data.
Image shows the coronavirus along with data charts and numbers.
iStock/Getty Images Plus