Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party social media tools that collect personal information in Illinois? What are the requirements?

Based on the context documents, if you are using third-party social media tools that collect personal information in Illinois, you must ensure that the personal information is disposed of in a manner that renders it unreadable, unusable, and undecipherable [1.1]. Additionally, you must implement and maintain reasonable security measures to protect the personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure [1.3].

If you are disclosing personal information concerning an Illinois resident, you must obtain the required consents prior to disclosure [2.2].

If the personal information concerns a child, you must comply with the requirements of the Illinois Child Privacy Protection Act [4.1].

If there is a breach of the security of the system data or written material, you must notify the resident at no charge that there has been a breach of the security of the system data or written material following discovery or notification of the breach [1.2][1.4].

However, the context documents do not provide specific requirements for using third-party social media tools that collect personal information in Illinois.

Note that if you own or license personal information concerning an Illinois resident, you must notify the resident at no charge that there has been a breach of the security of the system data following discovery or notification of the breach [1.2]. The notification must be made in the most expedient time possible and without unreasonable delay, consistent with any measures necessary to determine the scope of the breach and restore the reasonable integrity, security, and confidentiality of the data system. The notification to an Illinois resident shall include, but need not be limited to, information as follows: (1) With respect to personal information as defined in Section 5 in paragraph (1) of the definition of “personal information”: (A) the toll-free numbers and addresses for consumer reporting agencies; (B) the toll-free number, address, and website address for the Federal Trade Commission; and (C) a statement that the individual can obtain information from these sources about fraud alerts and security freezes. (2) With respect to personal information defined in Section 5 in paragraph (2) of the definition of “personal information”, notice may be provided in electronic or other form directing the Illinois resident whose personal information has been breached to promptly change his or her user name or password and security question or answer, as applicable, or to take other steps appropriate to protect all online accounts for which the resident uses the same user name or email address and password or security question and answer [1.2].

Therefore, it is recommended that you take appropriate measures to protect personal information collected through third-party social media tools and ensure that you comply with the notification requirements in case of a breach.

Source(s):
Jurisdiction

Illinois