(a) The department shall prepare for the commissioner an annual report describing the security measures taken to protect data collected under this chapter and any breaches, attempted cyber attacks, and security issues related to the data that are encountered during the calendar year.
(b) The report described by this section is not subject to Chapter 552, Government Code, but may be released on request to a member of the legislature.

(c) If a cyber attack occurs targeting data collected under this chapter, the department shall notify the Department of Public Safety of the State of Texas and the Federal Bureau of Investigation of the attack.