Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party chat tools that collect personal information in California in Illinois? What are the requirements?

Yes, you can use third-party chat tools that collect personal information in California in Illinois, but you must ensure that the third-party provider implements and maintains reasonable security measures to protect the personal information of Illinois residents [1.1].

Requirements for using third-party chat tools that collect personal information in Illinois

Illinois has strict laws regarding the collection, storage, and disposal of personal information. The Personal Information Protection Act (PIPA) [1.5] requires data collectors to implement and maintain reasonable security measures to protect personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure [1.1].

Additionally, any contract for the disclosure of personal information concerning an Illinois resident that is maintained by a data collector must include a provision requiring the person to whom the information is disclosed to implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure [1.1].

If a state or federal law requires a data collector to provide greater protection to records that contain personal information concerning an Illinois resident that are maintained by the data collector and the data collector is in compliance with the provisions of that state or federal law, the data collector shall be deemed to be in compliance with the provisions of PIPA [1.1].

Conclusion

If you are using third-party chat tools that collect personal information in Illinois, you must ensure that the third-party provider implements and maintains reasonable security measures to protect the personal information of Illinois residents. Additionally, any contract for the disclosure of personal information concerning an Illinois resident that is maintained by a data collector must include a provision requiring the person to whom the information is disclosed to implement and maintain reasonable security measures to protect those records from unauthorized access, acquisition, destruction, use, modification, or disclosure.

Source(s):
Jurisdiction

California, Illinois