SPRINGFIELD, Ill. - Understanding many consumers have had their personal information at risk for theft by hackers and cyber-criminals, state Rep. Mike Smiddy, D-Hillsdale, is sponsoring a comprehensive approach to responding to data breaches.
"Personal information is vulnerable every time we visit the store, doctor's office or use our credit card, and this measure will help consumers avoid identity theft in the event their information is stolen," Smiddy said. "Consumers have the right to know when their personal information may be threatened, and this bill increases the list of incidents that require timely alerts to potential victims."
In Illinois, when a consumer's personal information is put at risk by a hacker or identity thief who breaks online security, those companies are required to notify affected customers. Smiddy is cosponsoring Senate Bill 1833, which expands the notification requirements to include medical, insurance and locational information such as addresses. Affected entities can include the large box retail stores whose data breaches have made headlines in recent months, but any entity that stores personal data would need to comply with the new regulation in the event of a breach. Data collectors like these are required to take responsible steps to protect the data they gather, maintain a privacy policy, and provide consumers with the necessary steps to remain safe. Additionally, the collectors must notify the Attorney General's office. The Attorney General will create and update a website listing every data breach affecting Illinois residents to increase awareness.
"In the last several years, data breaches have become far too frequent," Attorney General Lisa Madigan said. "It is imperative that we strengthen the state's data breach notification laws to ensure that people are informed of breaches so they can take steps to minimize the risk of identity theft."
Senate Bill 1833 passed the House Judiciary: Civil Committee on Tuesday and now awaits a vote before the full House.
###
