|SB1833 Enrolled||LRB099 09064 JLS 31312 b|
AN ACT concerning business.
Be it enacted by the People of the State of Illinois,
represented in the General Assembly:
The Personal Information Protection Act is
amended by changing Sections 5, 10, and 12 and adding Sections
45, 50, and 55 as follows:
(815 ILCS 530/5)
In this Act:
"Data Collector" may include, but is not limited to,
government agencies, public and private universities,
privately and publicly held corporations, financial
institutions, retail operators, and any other entity that, for
any purpose, handles, collects, disseminates, or otherwise
deals with nonpublic personal information.
"Breach of the security of the system data" or "breach"
unauthorized acquisition of computerized data that
compromises the security, confidentiality, or integrity of
personal information maintained by the data collector. "Breach
of the security of the system data" does not include good faith
acquisition of personal information by an employee or agent of
the data collector for a legitimate purpose of the data
collector, provided that the personal information is not used
for a purpose unrelated to the data collector's business or