Illinois Modifies Personal Information Protection Act Provisions
The state of Illinois has modified its provisions regarding notice of breach under its Personal Information Protection Act. These provisions are effective as of January 1, 2020.
Notice of Breach
Under the amendment, data collectors who suffer a breach of personal information are required to provide the Attorney General with a description of the breach, the number of affected Illinois residents, and a description of any steps taken related to the incident. The notification must be made as quickly as possible, without unreasonable delay, and no later than when the data collector provides notice to consumers of the breach.
Rights of the Attorney General
Upon receiving notification of a breach, the Attorney General is permitted to publish the name of the data collector that suffered the breach, the types of personal information compromised by the breach, and the date of the breach.
For the full text of Senate Bill 1624, please refer to http://www.ilga.gov/legislation/publicacts/101/PDF/101-0343.pdf.
Elizabeth Dailey, JD, is a Regulatory Compliance Director with CLA. She is a graduate of the University of New Hampshire and earned her juris doctor at New England Law. She is admitted to the Massachusetts Bar.
Comments are closed.