August 16, 2019

Illinois Passes Amendments to Data Breach Notification Law

This law will require companies to notify the attorney general in the event of certain data breaches.

What Needs To Be Reported and What Type of Breaches Need To Be Reported:

  1. ‍‍The breach needs to be affecting more than 500 state residents
  2. The nature of the data breach needs to be included
  3. The steps that must be taken to fix this issue need to be included

These three key factors need to be reported as soon as possible without any delay and no later than when the data collector provides notice to consumers. This new legislation allows the attorney general to name the company suffering the breach, what personal information was stolen, and the date range in which the information was stolen.

This bill will become a law on Aug 24, 2019 if it's not returned by the governor.