HB 3025

Abstract

Amends the Personal Information Protection Act. Provides that "breach of the security of the system data" includes the unauthorized use (instead of only the unauthorized acquisition) of computerized data that compromises the security, confidentiality, or integrity of personal information maintained by a data collector. Provides that a data collector that owns or licenses personal information shall notify the Attorney General of a breach. Provides that a data collector that maintains or stores (instead of only maintains) computerized or other data (instead of only computerized data) that includes personal information must cooperate with the owner or licensee of the information in relation to a breach. Requires that notification of a breach sent to an Illinois resident by a data collector that owns or licenses personal information or by a State agency must contain certain information, including information concerning placing a security freeze on the release of information from the resident's credit report. Sets forth the Attorney General's duties upon receiving notice of a security breach, as well as additional duties of data collectors and State agencies. Sets forth standards for disposal of materials containing personal information, and provides penalties for a violation.