Artificial Intelligence Education and Workforce Readiness Act of 2026

(a) Data breach reporting portal. Not later than 1 year after the date of the enactment of this Act, the Secretary of Education shall develop a secure portal for receiving reports of breaches of personally identifiable student data from entities receiving funds under this Act or the amendments made by this Act, including breaches of such data with regard to elementary, secondary, and postsecondary education.

(b) Incident reports to Congress. Not later than 30 days after each breach of personally identifiable student data reported through the portal established under subsection (a) data breach affecting not fewer than 10,000 students, the Secretary of Education shall submit to the Committee on Education and Workforce of the House of Representatives and the Committee on Health, Education, Labor, and Pensions of the Senate a report describing such breach, including the number of students affected, the nature of the data compromised, and the remedial actions taken or planned, as applicable.

(c) Annual reports to Congress. Not later than 2 years after the date of the enactment of this Act and annually thereafter, the Secretary of Education shall submit the Committee on Education and Workforce of the House of Representatives and the Committee on Health, Education, Labor, and Pensions of the Senate a report containing—

(1) a list of all breaches of personally identifiable student data reported through the portal established under subsection (a) during the 1-year period covered by such report;

(2) the number of students affected by each such breach;

(3) an assessment of trends in data security vulnerabilities among entities receiving funds under this Act; and

(4) recommendations for legislative or administrative action to improve the security of personally identifiable student data.