Lege Trend: Re-defining Private Data in the Land of Lincoln

The Illinois Attorney General is working to expand the definition of what is private information that triggers data breach notifications.

She wants to include the following information:

• email addresses
• log-ins
• passwords
• Health insurance information
•  biometric information
• geolocation information

Her proposal doesn’t specify when the consumer and the Attorney General office must be notified. Instead,   businesses are granted flexibility by requiring that business take “reasonable steps” to protect information that it holds.   

S.B. 1833