Under Illinois law, a business that collects personal information of Illinois residents has certain duties to inform affected people in the event of a breach, under 815 ILCS 530/10:
Illinois Business Security Breach Notification Requirements
by Attorney Eric D. Puryear