Can I sell personal information without obtaining consent in Illinois? What are the requirements?

Based on the documents provided, it is generally not permissible to sell personal information without obtaining consent in Illinois.

Under 815 ILCS 530/45, a data collector that owns or licenses, or maintains or stores but does not own or license, records that contain personal information concerning an Illinois resident shall implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure. Additionally, a contract for the disclosure of personal information concerning an Illinois resident that is maintained by a data collector must include a provision requiring the person to whom the information is disclosed to implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure.

Furthermore, 50 ILAC 4002.100 provides limits on disclosure of nonpublic personal financial information to nonaffiliated third parties, and 50 ILAC 4002.110 provides limits on the redisclosure and reuse of nonpublic personal financial information.

Therefore, it is important to obtain consent and comply with the relevant regulations before disclosing or selling personal information in Illinois.

In summary, selling personal information without obtaining consent in Illinois is generally not permissible. It is important to comply with the relevant regulations and obtain consent before disclosing or selling personal information.

Jurisdiction

Illinois

• Privacy