House Bill: 1633
815 Illinois Compiled Statute: §530/1 et seq.
Effective Date: June 27, 2006
Definition of Personal Information: An individual's first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted or redacted:
(a) Social security number;
(b) Driver's license number or State Identification Card number; or
(c) Account number or credit or debit card number, or an account number or credit card in combination with any required security code, access code, or password that would permit access to an individual’s financial account.
Summary: Any data collector that owns or licenses personal information concerning an Illinois resident shall notify the resident that there has been a breach of the security of the system data following discovery or notification of the breach. The disclosure notification shall be made in the most expedient time possible and without unreasonable delay, consistent with any measures necessary to determine the scope of the breach and restore the reasonable integrity, security, and confidentiality of the data system. Any data collector that maintains computerized data that includes personal information that the data collector does not own or license shall notify the owner or licensee of the information of any breach of the security of the data immediately following discovery, if the personal information was, or is reasonably believed to have been, acquired by an unauthorized person.
Visit the state Web site