Short title
Short title. This Act may be cited as the Personal Information Protection Act. (Source: P.A. 94-36, eff. 1-1-06.)
Illinois · statute · 815 ILCS 530 · 12 active provisions
Short title. This Act may be cited as the Personal Information Protection Act. (Source: P.A. 94-36, eff. 1-1-06.)
Definitions. In this Act: "Data collector" may include, but is not limited to, government agencies, public and private universities, privately and publicly held corporations, financial institutions, retail operators, and any other entity that, for any purpose, handles, collects, disseminates, or otherwise deals with no…
Notice of breach; notice to Attorney General. (a) Any data collector that owns or licenses personal information concerning an Illinois resident shall notify the resident at no charge that there has been a breach of the security of the system data following discovery or notification of the breach. The disclosure notific…
Notice of breach; State agency. (a) Any State agency that collects personal information concerning an Illinois resident shall notify the resident at no charge that there has been a breach of the security of the system data or written material following discovery or notification of the breach. The disclosure notificatio…
Waiver. Any waiver of the provisions of this Act is contrary to public policy and is void and unenforceable. (Source: P.A. 94-36, eff. 1-1-06.)
Violation. A violation of this Act constitutes an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. (Source: P.A. 94-36, eff. 1-1-06.)
Annual reporting. Any State agency that collects personal data and has had a breach of security of the system data or written material shall submit a report within 5 business days of the discovery or notification of the breach to the General Assembly listing the breaches and outlining any corrective measures that have…
Safe disposal of information. Any State agency that collects personal data that is no longer needed or stored at the agency shall dispose of the personal data or written material it has collected in such a manner as to ensure the security and confidentiality of the material. (Source: P.A. 94-947, eff. 6-27-06.)
Disposal of materials containing personal information; Attorney General. (a) In this Section, "person" means: a natural person; a corporation, partnership, association, or other legal entity; a unit of local government or any agency, department, division, bureau, board, commission, or committee thereof; or the State of…
Data security. (a) A data collector that owns or licenses, or maintains or stores but does not own or license, records that contain personal information concerning an Illinois resident shall implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction,…
Entities subject to the federal Health Insurance Portability and Accountability Act of 1996. Any covered entity or business associate that is subject to and in compliance with the privacy and security standards for the protection of electronic health information established pursuant to the federal Health Insurance Port…
(Amendatory provisions; text omitted). (Source: P.A. 94-36, eff. 1-1-06; text omitted.)