Illinois businesses that maintain personal information may have legal obligations following certain data-security breaches.
Illinois’ Personal Information Protection Act contains requirements concerning notification following qualifying breaches of personal information.
Businesses that maintain customer or employee personal information should have a written plan for responding to a data incident.
Read more:Illinois General Assembly — Personal Information Protection Act