Sen. Laura M. Murphy

Filed: 3/18/2020

 

 


 

 


 
10100SB3168sam001LRB101 17470 HEP 71612 a

1
AMENDMENT TO SENATE BILL 3168

2    AMENDMENT NO. ______. Amend Senate Bill 3168 by replacing
3everything after the enacting clause with the following:
 
4    "Section 5. The Toll Highway Act is amended by changing
5Section 19.1 as follows:
 
6    (605 ILCS 10/19.1)
7    Sec. 19.1. Confidentiality of personally identifiable
8information obtained through electronic toll collection
9system.
10    (a) For purposes of this Section:
11    "Electronic toll collection system" is a system where a
12transponder, camera-based vehicle identification system, or
13other electronic medium is used to deduct payment of a toll
14from a subscriber's account or to establish an obligation to
15pay a toll.
16    "Electronic toll collection system user" means any natural

 

 

10100SB3168sam001- 2 -LRB101 17470 HEP 71612 a

1person who subscribes to an electronic toll collection system
2or any natural person who uses a tolled transportation facility
3that employs the Authority's electronic toll collection
4system.
5    "Personally identifiable information" means any
6information that identifies or describes an electronic toll
7collection system user, including but not limited to travel
8pattern data, address, telephone number, e-mail address,
9license plate number, photograph, bank account information, or
10credit card number.
11    (b) Except as otherwise provided in this Section, the
12Authority may not sell or otherwise provide to any person or
13entity personally identifiable information of any electronic
14toll collection system user that the Authority obtains through
15the operation of its electronic toll collection system.
16    (c) The Authority may, within practical business and cost
17constraints, store personally identifiable information of an
18electronic toll collection system user only if the information
19is required to perform account functions such as billing,
20account settlement, or toll violation enforcement activities.
21Records identifying a specific instance of travel by a specific
22person or vehicle shall be used only as required to ensure the
23payment and enforcement of tolls and for law enforcement
24purposes.
25    (d) By no later than December 31, 2011, the Authority shall
26establish a privacy policy regarding the collection and use of

 

 

10100SB3168sam001- 3 -LRB101 17470 HEP 71612 a

1personally identifiable information. Upon its adoption, the
2policy shall be posted on the Authority's website and a copy
3shall be included with each transponder transmitted to a user.
4The policy shall include but need not be limited to the
5following:
6        (1) A description of the types of personally
7    identifiable information collected by the Authority.
8        (2) The categories of third-party persons or entities
9    with whom the Authority may share personally identifiable
10    information and for what purposes that information is
11    shared.
12        (3) The process by which the Authority notifies
13    electronic toll collection system users of material
14    changes to its privacy policy.
15        (4) The process by which an electronic toll collection
16    system user may review and request changes to any of his or
17    her personally identifiable information.
18        (5) The effective date of the privacy policy.
19    (e) This Section does not prohibit the Authority from:
20        (1) providing aggregated traveler information derived
21    from collective data relating to a group or category of
22    electronic toll collection system users from which
23    personally identifiable information has been removed;
24        (2) sharing data with another transportation agency or
25    third-party vendor to comply with interoperability
26    specifications and standards regarding electronic toll

 

 

10100SB3168sam001- 4 -LRB101 17470 HEP 71612 a

1    collection devices and technologies, provided that the
2    other transportation agency or third-party vendor may not
3    use personally identifiable information obtained under
4    this Section for a purpose other than described in this
5    Section;
6        (3) performing financial, legal and accounting
7    functions such as billing, account settlement, toll
8    violation enforcement, or other activities required to
9    operate and manage its toll collection system;
10        (4) communicating about products and services offered
11    by itself, a business partner, or another public agency;
12        (5) using personally identifiable information in
13    research projects, provided that appropriate
14    confidentiality restrictions are employed to protect
15    against the unauthorized release of such information;
16        (6) releasing personally identifiable information in
17    response to a warrant, grand jury, subpoena, or lawful
18    order from a court of competent jurisdiction;
19        (7) releasing personally identifiable information to
20    law enforcement agencies if exigent circumstances make in
21    the case of an emergency when obtaining a warrant or
22    subpoena would be impractical; and
23        (8) releasing personally identifiable information to
24    the Authority's Inspector General or, at the Inspector
25    General's direction, to law enforcement agencies under
26    paragraphs (5) and (6) of subsection (f) of Section 8.5 of

 

 

10100SB3168sam001- 5 -LRB101 17470 HEP 71612 a

1    this Act.
2    (f) In any agreement allowing another public entity to use
3the Authority's toll collection system in a transportation
4facility, the Authority shall require the other public entity
5to comply with the requirements of this Section.
6    (g) Personally identifiable information generated through
7the Authority's toll collection process that reveals the date,
8time, location or direction of travel by an electronic toll
9collection system user shall be exempt from release under the
10Illinois Freedom of Information Act and the information shall
11be used for enforcement purposes with respect to toll
12collections as specified in this Act and any action brought by
13a prosecutor acting in such a capacity. The exemption in this
14subsection shall not apply to information that concerns (i) the
15public duties of public employees and officials; (ii) whether
16an electronic toll collection system user has paid tolls; (iii)
17whether the Authority is enforcing toll violation penalties
18against electronic toll collection users who do not pay tolls;
19(iv) accidents or other incidents that occur on highways under
20the jurisdiction of the Authority; or (v) the obligation,
21receipt, and use of the funds of the Authority. The exemption
22in this subsection (g) shall not be a limitation or restriction
23on other Freedom of Information Act exemptions applicable to
24personally identifiable information or private information.
25    (h) The Authority shall make personally identifiable
26information of a person available in response to a grand jury

 

 

10100SB3168sam001- 6 -LRB101 17470 HEP 71612 a

1subpoena and to a law enforcement agency pursuant to an
2investigation.
3    (i) The Authority shall discard personally identifiable
4information within 5 years. The Authority shall make every
5effort, within practical business and cost constraints, to
6purge the personal account information of an account that is
7closed or terminated. In no case shall the Authority maintain
8personal information more than 5 years after the date an
9account is closed or terminated.
10    (j) Nothing in this Section precludes compliance with a
11court order or settlement agreement that has been approved on
12or before January 1, 2021.
13(Source: P.A. 97-342, eff. 8-12-11.)".