IE 11 Not Supported

For optimal browsing, we recommend Chrome, Firefox or Safari browsers.

CoSN: States Passed 29 Cybersecurity Laws in 2024

A new report from the Consortium for School Networking examines the wave of cybersecurity laws passed last year and how they relate to schools. It also makes policy recommendations for state and local education leaders.

A map of the U.S. in white surrounded by a computer circuit board in white against a blue background.
A total of 29 cybersecurity laws were passed in 20 states last year, and many of them pertain to education, according to a report today by the Consortium for School Networking (CoSN).

From a Tennessee bill that bans public schools from making ransomware payments to a Florida amendment that authorizes state-funded school cybersecurity assistance, the document lists the laws passed in 2024 and how they aim to protect schools from cyber crime.

The wave of policy comes in response to a slew of breaches in recent years that exposed the sensitive data of millions of students and staff, shut down schools, and diverted education funds to pay ransomware demands.

Trends among the 29 bills that became law last year, as well as the 229 that were introduced but not enacted, include requirements to protect student data, expand cybersecurity training for school staff and students, create standards for incident reporting, enable IT leaders to share threat information, promote cybersecurity workforce development, and establish sustainable funding for school cybersecurity.

CoSN's 36-page report examines these trends and connects them to state laws that have been proposed or enacted. It also makes cybersecurity policy recommendations for state and local education leaders with examples from various states. These recommendations focus on five areas: comprehensive cybersecurity education programs, cybersecurity grant programs, incident reporting and response, public-private partnerships, and artificial intelligence and cybersecurity integration.

The goal of the report, according to CoSN CEO Keith Krueger, is to keep leaders at every level of government informed about steps they can take to boost cybersecurity for schools.

“By providing this vital analysis, we aim to empower local, state and federal leaders to strengthen their collaboration and bolster defenses against the persistent threats targeting school networks and the sensitive student and staff data they safeguard,” Krueger said in a public statement.
Sign Up Today

Don't miss a headline and stay on top of the latest EdTech trends.