Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I ignore consumer requests for information or deletion in Illinois? What are the requirements?

Here is your answer to the query based on the provided context:

Consumer Requests for Information or Deletion in Illinois

No, you cannot ignore consumer requests for information or deletion in Illinois. Under Illinois law, consumers have the right to request access to their personal information held by a data collector, as well as request deletion of their personal information. Data collectors are required to comply with these requests, subject to certain exceptions [3.2].

Requirements

Data collectors must implement and maintain reasonable security measures to protect personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure [3.2]. Additionally, data collectors must include a provision in contracts for the disclosure of personal information requiring the person to whom the information is disclosed to implement and maintain reasonable security measures [3.2]. State agencies that collect personal information must notify the resident at no charge if there has been a breach of the security of the system data or written material [3.3].

Penalties

Any person, including but not limited to a third party referenced in subsection (c), who violates the disposal of materials containing personal information is subject to a civil penalty of not more than $100 for each individual with respect to whom personal information is disposed of in violation of this Section. A civil penalty may not, however, exceed $50,000 for each instance of improper disposal of materials containing personal information [3.4].

Conclusion

In summary, data collectors in Illinois are required to comply with consumer requests for information or deletion, subject to certain exceptions. Additionally, data collectors must implement and maintain reasonable security measures to protect personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure. State agencies that collect personal information must notify the resident at no charge if there has been a breach of the security of the system data or written material. Any person who violates the disposal of materials containing personal information is subject to a civil penalty.

Source(s):
Jurisdiction

Illinois