Illinois Personal Information Protection Act

Illinois' Personal Information Protection Act — PIPA applies to qualifying businesses and other data collectors handling personal information about Illinois residents.

If qualifying personal information is breached, Illinois law can require notification to affected Illinois residents.

Notification generally must be made:

In the most expedient time possible and without unreasonable delay

subject to the statutory requirements.

Breach Affecting More Than 500 Illinois Residents

When a qualifying breach requires notification to more than:

500 Illinois residents

the data collector must also provide required notice to the Illinois Attorney General.

The Attorney General notification generally must occur no later than the time consumers are notified.