Illinois Senate Bill 240 (Prior Session Legislation)

---

Completed Legislative Action
Spectrum: Partisan Bill (Democrat 3-0)
Status: Failed on January 13 2021 - 100% progression
Action: 2021-01-13 - Session Sine Die
Text: Latest bill text (Introduced) [HTML]

Creates the Consumer Credit Reporting Agency Registration and Cybersecurity Program Act. Provides for requirements for consumer credit reporting agency registration. Contains provisions regarding grounds for revocation and suspension of a registration. Provides that by January 1, 2020, a consumer credit reporting agency must have a cybersecurity program documented in writing and designed to protect the confidentiality, integrity and availability of its information systems. Provides that a consumer credit reporting agency shall implement and maintain a written cybersecurity policy setting forth its policies and procedures for the protection of its information systems and nonpublic information stored on those information systems. Provides that a consumer credit reporting agency shall designated a qualified individual as a chief information security officer to oversee and implement its cybersecurity policy. Contains provisions concerning penetration testing and vulnerability assessments, audit trail, access privileges, and application security. Provides that a consumer credit reporting agency shall conduct periodic risk assessments of its information systems. Provides requirements for cybersecurity personnel and third-party service provider security policy. Provides that a consumer credit reporting agency shall establish a written incident response plan designed to promptly respond to a cybersecurity event. Provides that the consumer credit reporting agency shall notify the Department of Financial and Professional Regulation of the existence of a cybersecurity event no later than 72 hours after the event occurred. Makes other changes. Effective immediately.

CREDIT REPORT AGENCY-SECURITY

Sen. Michael Hastings [D]

Sen. Christopher Belt [D]

Sen. Laura Ellman [D]

Date	Chamber	Action
2021-01-13	Senate	Session Sine Die
2019-03-28	Senate	Rule 3-9(a) / Re-referred to Assignments
2019-03-22	Senate	Rule 2-10 Committee Deadline Established As March 28, 2019
2019-03-06	Senate	Postponed - Financial Institutions
2019-02-21	Senate	Added as Co-Sponsor Sen. Laura Ellman
2019-02-21	Senate	Added as Co-Sponsor Sen. Christopher Belt
2019-02-20	Senate	Postponed - Financial Institutions
2019-02-06	Senate	Assigned to Financial Institutions
2019-01-31	Senate	Referred to Assignments
2019-01-31	Senate	First Reading
2019-01-31	Senate	Filed with Secretary by Sen. Michael E. Hastings

Type	Source
Summary	https://www.ilga.gov/legislation/BillStatus.asp?DocNum=240&GAID=15&DocTypeID=SB&SessionID=108&GA=101
Text	https://www.ilga.gov/legislation/101/SB/10100SB0240.htm