Illinois Modifies Personal Information Protection Act Provisions

The state of Illinois has modified its provisions regarding notice of breach under its Personal Information Protection Act. These provisions are effective as of January 1, 2020.

Notice of Breach        

Under the amendment, data collectors who suffer a breach of personal information are required to provide the Attorney General with a description of the breach, the number of affected Illinois residents, and a description of any steps taken related to the incident. The notification must be made as quickly as possible, without unreasonable delay, and no later than when the data collector provides notice to consumers of the breach.

Rights of the Attorney General

Upon receiving notification of a breach, the Attorney General is permitted to publish the name of the data collector that suffered the breach, the types of personal information compromised by the breach, and the date of the breach.

For the full text of Senate Bill 1624, please refer to http://www.ilga.gov/legislation/publicacts/101/PDF/101-0343.pdf.

  • 14134296646

Elizabeth Dailey, JD, is a Regulatory Compliance Director with CLA. She is a graduate of the University of New Hampshire and earned her juris doctor at New England Law. She is admitted to the Massachusetts Bar.

Comments are closed.