Illinois General Assembly - Bill Status for HB3025

Amends the Personal Information Protection Act. Provides that "breach of the security of the system data" includes the unauthorized use (instead of only the unauthorized acquisition) of computerized data that compromises the security, confidentiality, or integrity of personal information maintained by a data collector. Provides that a data collector that owns or licenses personal information shall notify the Attorney General of a breach. Provides that a data collector that maintains or stores (instead of only maintains) computerized or other data (instead of only computerized data) that includes personal information must cooperate with the owner or licensee of the information in relation to a breach. Requires that notification of a breach sent to an Illinois resident by a data collector that owns or licenses personal information or by a State agency must contain certain information, including information concerning placing a security freeze on the release of information from the resident's credit report. Sets forth the Attorney General's duties upon receiving notice of a security breach, as well as additional duties of data collectors and State agencies. Sets forth standards for disposal of materials containing personal information, and provides penalties for a violation.

Replaces everything after the enacting clause. Amends the Personal Information Protection Act. Provides that "breach of the security of the system data" includes the unauthorized use (instead of only the unauthorized acquisition) of computerized data that compromises the security, confidentiality, or integrity of personal information maintained by a data collector. Provides that a data collector that owns or licenses personal information shall notify the Attorney General of a breach. Provides that a data collector that maintains or stores (instead of only maintains) computerized or other data (instead of only computerized data) that includes personal information must cooperate with the owner or licensee of the information in relation to a breach. Requires that notification of a breach sent to an Illinois resident by a data collector that owns or licenses personal information or by a State agency must contain certain information, including information concerning placing a security freeze on the release of information from the resident's credit report. Sets forth standards for disposal of materials containing personal information, and provides penalties for a violation.

Replaces everything after the enacting clause. Amends the Personal Information Protection Act. Provides the same substance as House Amendment 1 except to (i) remove unauthorized use of computerized data from the definition of "breach of the security of the system data", (ii) remove the provision that a data collector that owns or licenses personal information shall notify the Attorney General of a security breach, (iii) require that more general information shall be provided in the disclosure notification to an Illinois resident after a breach, (iv) provide for a delay of notification, by a State agency, to prevent interference with a criminal investigation, (v) state that a third party contracting with a person to dispose of materials containing personal information may be subject to a civil penalty, and (vi) specify that a person disposing of materials containing personal information must do so in a manner that renders the information unreadable, unusable, and undecipherable and no longer strictly limits the avenues for disposal.

×