HB3024 Summary

• Expands the Personal Information Protection Act to include "private contact information" (home address, home or personal phone number, personal e-mail address) alongside existing protections for personal financial data.

• Prohibits the sale of private contact information and restricts transfers or sharing of private contact information to only those necessary for legitimate business purposes, with restrictions against further unauthorized disclosure.

• Requires data collectors and State agencies to notify Illinois residents of data breaches involving personal information or private contact information in the most expedient time possible without unreasonable delay.

• Mandates proper disposal of materials containing personal or private contact information by rendering them unreadable, unusable, and undecipherable through methods such as shredding, burning, or electronic destruction.

• Establishes civil penalties of up to $100 per individual (capped at $50,000 per instance) for improper disposal of personal or private contact information, enforceable by the Attorney General.