; and (B) presented in the aggregate; and (2) at a minimum, protects personal privacy to the extent required by applicable Federal and State privacy laws. (e) Covered entity defined In this section, the term covered entity means the following: (1) An elementary school. (2) A secondary school. (3) A local educational agency. (4) A State educational agency. (5) An educational service agency. 4. K–12 Cybersecurity Technology Improvement program (a) Establishment The Director of the Cybersecurity and Infrastructure Security Agency, shall establish, through partnerships with one or more information sharing and analysis organizations, a program (to be known as the K–12 Cybersecurity Technology Improvement program ) to deploy cybersecurity capabilities to address cybersecurity risks and threats to information systems of elementary schools and secondary schools through— (1) developing cybersecurity strategies and installation of effective cybersecurity tools tailored for K–12 schools; (2) making available cybersecurity services that enhance the ability of K–12 schools to protect themselves from ransomware and other cybersecurity threats