Public Act 099-0775
 
HB4648 EnrolledLRB099 17036 HEP 41390 b


  
    AN ACT concerning digital assets.
  
 
    Be it enacted by the People of the State of Illinois,
 
represented in the General Assembly:
  
 
 
    Section 1. Short title. This Act may be cited as the 
Revised Uniform Fiduciary Access to Digital Assets Act (2015).
 
    Section 2. Definitions. In this Act:
    (1) "Account" means an arrangement under a 
terms-of-service agreement in which a custodian carries, 
maintains, processes, receives, or stores a digital asset of 
the user or provides goods or services to the user.
    (2) "Agent" means an attorney-in-fact granted authority 
under a durable or nondurable power of attorney.
    (3) "Carries" means engages in the transmission of an 
electronic communication.
    (4) "Catalogue of electronic communications" means 
information that identifies each person with which a user has 
had an electronic communication, the time and date of the 
communication, and the electronic address of the person.
    (5) "Guardian" means a person appointed by a court to 
manage the estate of a living individual.  The term includes a 
standby or temporary guardian.
    (6) "Content of an electronic communication" means 
information concerning the substance or meaning of the 
communication which:
        (A) has been sent or received by a user;
        (B) is in electronic storage by a custodian providing 
    an electronic-communication service to the public or is 
    carried or maintained by a custodian providing a 
    remote-computing service to the public; and
        (C) is not readily accessible to the public.
    (7) "Court" means a court of competent jurisdiction.
    (8) "Custodian" means a person that carries, maintains, 
processes, receives, or stores a digital asset of a user.
    (9) "Designated recipient" means a person chosen by a user 
using an online tool to administer digital assets of the user.
    (10) "Digital asset" means an electronic record in which an 
individual has a right or interest.  The term does not include 
an underlying asset or liability unless the asset or liability 
is itself an electronic record.
    (11) "Electronic" means relating to technology having 
electrical, digital, magnetic, wireless, optical, 
electromagnetic, or similar capabilities.
    (12) "Electronic communication" has the meaning set forth 
in 18 U.S.C. Section 2510(12), as amended.
    (13) "Electronic communication service" means a custodian 
that provides to a user the ability to send or receive an 
electronic communication.
    (14) "Fiduciary" means an original, additional, or 
successor personal representative, guardian, agent, or 
trustee.
    (15) "Information" means data, text, images, videos, 
sounds, codes, computer programs, software, databases, or the 
like.
    (16) "Online tool" means an electronic service provided by 
a custodian that allows a user in an agreement distinct from 
the terms-of-service agreement between the custodian and user, 
to provide directions for disclosure or nondisclosure of 
digital assets to a third person.
    (17) "Person" means an individual, estate, business or 
nonprofit entity, public corporation, government or 
governmental subdivision, agency, or instrumentality, or other 
legal entity.
    (18) "Personal representative" means an executor, 
administrator, special administrator, or person that performs 
substantially the same function under law of this state other 
than this Act.
    (19) "Power of attorney" means a record that grants an 
agent authority to act in the place of a principal.
    (20) "Principal" means an individual who grants authority 
to an agent in a power of attorney.
    (21) "Person with a disability" means an individual for 
whom a guardian has been appointed.  The term includes an 
individual for whom an application for the appointment of a 
guardian is pending.
    (22) "Record" means information that is inscribed on a 
tangible medium or that is stored in an electronic or other 
medium and is retrievable in perceivable form.
    (23) "Remote-computing service" means a custodian that 
provides to a user computer-processing services or the storage 
of digital assets by means of an electronic communications 
system, as defined in 18 U.S.C. Section 2510(14), as amended.
    (24) "Terms-of-service agreement" means an agreement that 
controls the relationship between a user and a custodian.
    (25) "Trustee" means a fiduciary with legal title to 
property under an agreement or declaration that creates a 
beneficial interest in another.  The term includes a successor 
trustee.
    (26) "User" means a person that has an account with a 
custodian.
    (27) "Will" includes a codicil, testamentary instrument 
that only appoints an executor, and instrument that revokes or 
revises a testamentary instrument.
 
    Section 3. Applicability.
    (a) This Act applies to:
        (1) a fiduciary acting under a will or power of 
    attorney executed before, on, or after the effective date 
    of this Act;
        (2) a personal representative acting for a decedent who 
    died before, on, or after the effective date of this Act;
        (3) a guardianship proceeding commenced before, on, or 
    after the effective date of this Act; and
        (4) a trustee acting under a trust created before, on, 
    or after the effective date of this Act.
    (b) This Act applies to a custodian if the user resides in 
this state or resided in this state at the time of the user's 
death.
    (c) This Act does not apply to a digital asset of an 
employer used by an employee in the ordinary course of the 
employer's business.
 
    Section 4. User direction for disclosure of digital assets.
    (a) A user may use an online tool to direct the custodian 
to disclose to a designated recipient or not to disclose some 
or all of the user's digital assets, including the content of 
electronic communications.  If the online tool allows the user 
to modify or delete a direction at all times, a direction 
regarding disclosure using an online tool overrides a contrary 
direction by the user in a will, trust, power of attorney, or 
other record.
    (b) If a user has not used an online tool to give direction 
under subsection (a) or if the custodian has not provided an 
online tool, the user may allow or prohibit in a will, trust, 
power of attorney, or other record, disclosure to a fiduciary 
of some or all of the user's digital assets, including the 
content of electronic communications sent or received by the 
user.
    (c) A user's direction under subsection (a) or (b) 
overrides a contrary provision in a terms-of-service agreement 
that does not require the user to act affirmatively and 
distinctly from the user's assent to the terms of service.
 
    Section 5. Terms-of-service agreement.
    (a) This Act does not change or impair a right of a 
custodian or a user under a terms-of-service agreement to 
access and use digital assets of the user.
    (b) This Act does not give a fiduciary or designated 
recipient any new or expanded rights other than those held by 
the user for whom, or for whose estate, the fiduciary or 
designated recipient acts or represents.
    (c) A fiduciary's or designated recipient's access to 
digital assets may be modified or eliminated by a user, by 
federal law, or by a terms-of-service agreement if the user has 
not provided direction under Section 4.
 
    Section 6. Procedure for disclosing digital assets.
    (a)  When disclosing digital assets of a user under this 
Act, the custodian may at its sole discretion:
        (1) grant a fiduciary or designated recipient full 
    access to the user's account;
        (2) grant a fiduciary or designated recipient partial 
    access to the user's account sufficient to perform the 
    tasks with which the fiduciary or designated recipient is 
    charged; or
        (3) provide a fiduciary or designated recipient a copy 
    in a record of any digital asset that, on the date the 
    custodian received the request for disclosure, the user 
    could have accessed if the user were alive and had full 
    capacity and access to the account.
    (b) A custodian may assess a reasonable administrative 
charge for the cost of disclosing digital assets under this 
Act.
    (c) A custodian need not disclose under this Act a digital 
asset deleted by a user.
    (d) If a user directs or a fiduciary requests a custodian 
to disclose under this Act some, but not all, of the user's 
digital assets, the custodian need not disclose the assets if 
segregation of the assets would impose an undue burden on the 
custodian.  If the custodian believes the direction or request 
imposes an undue burden, the custodian or fiduciary may seek an 
order from the court to disclose:
        (1) a subset limited by date of the user's digital 
    assets;
        (2) all of the user's digital assets to the fiduciary 
    or designated recipient;
        (3) none of the user's digital assets; or
        (4) all of the user's digital assets to the court for 
    review in camera.
 
    Section 7. Disclosure of content of electronic 
communications of deceased user. If a deceased user consented 
or a court directs disclosure of the contents of electronic 
communications of the user, the custodian shall disclose to the 
personal representative of the estate of the user the content 
of an electronic communication sent or received by the user if 
the representative gives the custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) a certified copy of the death certificate of the 
    user;
        (3) a certified copy of the letter of appointment of 
    the representative or a court order;
        (4) unless the user provided direction using an online 
    tool, a copy of the user's will, trust, power of attorney, 
    or other record evidencing the user's consent to disclosure 
    of the content of electronic communications; and
        (5) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the user's account;
            (B) evidence linking the account to the user; or
            (C) a finding by the court that:
                (i) the user had a specific account with the 
            custodian, identifiable by the information 
            specified in subparagraph (A);
                (ii) disclosure of the content of electronic 
            communications of the user would not violate 18 
            U.S.C. Section 2701 et seq., as amended, 47 U.S.C. 
            Section 222, as amended, or other applicable law;
                (iii) unless the user provided direction using 
            an online tool, the user consented to disclosure of 
            the content of electronic communications; or
                (iv) disclosure of the content of electronic 
            communications of the user is permitted under this 
            Act and reasonably necessary for administration of 
            the estate.
 
    Section 8. Disclosure of other digital assets of deceased 
user. Unless the user prohibited disclosure of digital assets 
or the court directs otherwise, a custodian shall disclose to 
the personal representative of the estate of a deceased user a 
catalogue of electronic communications sent or received by the 
user and digital assets, other than the content of electronic 
communications, of the user, if the representative gives the 
custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) a certified copy of the death certificate of the 
    user;
        (3) a certified copy of the letter of appointment of 
    the representative or a court order; and
        (4) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the user's account;
            (B) evidence linking the account to the user;
            (C) an affidavit stating that disclosure of the 
        user's digital assets is reasonably necessary for 
        administration of the estate; or
            (D) a finding by the court that:
                (i) the user had a specific account with the 
            custodian, identifiable by the information 
            specified in subparagraph (A); or
                (ii) disclosure of the user's digital assets 
            is permitted under this Act and reasonably 
            necessary for administration of the estate.
 
    Section 9. Disclosure of content of electronic 
communications of principal. To the extent a power of attorney 
expressly grants an agent authority over the content of 
electronic communications sent or received by the principal and 
unless directed otherwise by the principal or the court, a 
custodian shall disclose to the agent the content if the agent 
gives the custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) an original or copy of the power of attorney 
    expressly granting the agent authority over the content of 
    electronic communications of the principal;
        (3) a certification by the agent, under penalty of 
    perjury, that the power of attorney is in effect; and
        (4) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the principal's account; or
            (B) evidence linking the account to the principal.
 
    Section 10. Disclosure of other digital assets of 
principal. Unless otherwise ordered by the court, directed by 
the principal, or provided by a power of attorney, a custodian 
shall disclose to an agent with specific authority over digital 
assets or general authority to act on behalf of a principal a 
catalogue of electronic communications sent or received by the 
principal and digital assets, other than the content of 
electronic communications, of the principal if the agent gives 
the custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) an original or a copy of the power of attorney that 
    gives the agent specific authority over digital assets or 
    general authority to act on behalf of the principal;
        (3) a certification by the agent, under penalty of 
    perjury, that the power of attorney is in effect; and
        (4) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the principal's account; or
            (B) evidence linking the account to the principal.
 
    Section 11. Disclosure of digital assets held in trust when 
trustee is original user. Unless otherwise ordered by the court 
or provided in a trust, a custodian shall disclose to a trustee 
that is an original user of an account any digital asset of the 
account held in trust, including a catalogue of electronic 
communications of the trustee and the content of electronic 
communications.
 
    Section 12. Disclosure of contents of electronic 
communications held in trust when trustee not original user. 
Unless otherwise ordered by the court, directed by the user, or 
provided in a trust, a custodian shall disclose to a trustee 
that is not an original user of an account the content of an 
electronic communication sent or received by an original or 
successor user and carried, maintained, processed, received, 
or stored by the custodian in the account of the trust if the 
trustee gives the custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) a certified copy of the trust instrument that 
    includes consent to disclosure of the content of electronic 
    communications to the trustee;
        (3) a certification by the trustee, under penalty of 
    perjury, that the trust exists and the trustee is a 
    currently acting trustee of the trust; and
        (4) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the trust's account; or
            (B) evidence linking the account to the trust.
 
    Section 13. Disclosure of other digital assets held in 
trust when trustee not original user. Unless otherwise ordered 
by the court, directed by the user, or provided in a trust, a 
custodian shall disclose, to a trustee that is not an original 
user of an account, a catalogue of electronic communications 
sent or received by an original or successor user and stored, 
carried, or maintained by the custodian in an account of the 
trust and any digital assets, other than the content of 
electronic communications, in which the trust has a right or 
interest if the trustee gives the custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) a certified copy of the trust instrument;
        (3) a certification by the trustee, under penalty of 
    perjury, that the trust exists and the trustee is a 
    currently acting trustee of the trust; and
        (4) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the trust's account; or
            (B) evidence linking the account to the trust.
 
    Section 14. Disclosure of contents of electronic 
communications and digital assets to guardian of person with a 
disability.    (a) After an opportunity for a hearing under 
Article XIa of the Probate Act of 1975, the court may direct 
the disclosure of the digital assets of a person with a 
disability to his or her guardian.
    (b) Unless otherwise ordered by the court or directed by 
the user, a custodian shall disclose to a guardian the 
catalogue of electronic communications sent or received by a 
person with a disability and any digital assets, other than the 
content of electronic communications, in which the person with 
a disability has a right or interest if the guardian gives the 
custodian:
        (1) a written request for disclosure in physical or 
    electronic form;
        (2) a certified copy of the court order that gives the 
    guardian authority over the digital assets of the person 
    with a disability; and
        (3) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the account of the person with a 
        disability; or
            (B) evidence linking the account to the person with 
        a disability.
    (c) A guardian with general authority to manage the assets 
of a person with a disability may request a custodian of the 
digital assets of the person with a disability to suspend or 
terminate an account of the person with a disability for good 
cause.  A request made under this Section must be accompanied by 
a certified copy of the court order giving the guardian 
authority over the protected person's property.
 
    Section 15. Fiduciary duty and authority.
    (a) (Blank).
    (b) A fiduciary's or designated recipient's authority with 
respect to a digital asset of a user:
        (1) except as otherwise provided in Section 4, is 
    subject to the applicable terms of service;
        (2) is subject to other applicable law, including 
    copyright law;
        (3) in the case of a fiduciary, is limited by the scope 
    of the fiduciary's duties under Illinois law; and
        (4) may not be used to impersonate the user.
    (c) A fiduciary with authority over the property of a 
decedent, person with a disability, principal, or settlor has 
the right to access any digital asset in which the decedent, 
person with a disability, principal, or settlor had a right or 
interest and that is not held by a custodian or subject to a 
terms-of-service agreement.
    (d) A fiduciary acting within the scope of the fiduciary's 
duties is an authorized user of the property of the decedent, 
person with a disability, principal, or settlor for the purpose 
of applicable computer-fraud and unauthorized-computer-access 
laws, including Subdivision 30 of Article 17 of the Criminal 
Code of 2012, and may challenge the validity of an online tool 
in court when requesting an order directing compliance with 
this Act.
    (e) A fiduciary with authority over the tangible, personal 
property of a decedent, person with a disability, principal, or 
settlor:
        (1) has the right to access the property and any 
    digital asset stored in it; and
        (2) is an authorized user for the purpose of 
    computer-fraud and unauthorized-computer-access laws, 
    including Subdivision 30 of Article 17 of the Criminal Code 
    of 2012.
    (f) A custodian may disclose information in an account to a 
fiduciary of the user when the information is required to 
terminate an account used to access digital assets licensed to 
the user.
    (g) A fiduciary of a user may request a custodian to 
terminate the user's account.  A request for termination must be 
in writing, in either physical or electronic form, and 
accompanied by:
        (1) if the user is deceased, a certified copy of the 
    death certificate of the user;
        (2) a certified copy of the letter of appointment of 
    the representative or a small-estate affidavit or court 
    order, court order, power of attorney, or trust giving the 
    fiduciary authority over the account; and
        (3) if requested by the custodian:
            (A) a number, username, address, or other unique 
        subscriber or account identifier assigned by the 
        custodian to identify the user's account;
            (B) evidence linking the account to the user; or
            (C) a finding by the court that the user had a 
        specific account with the custodian, identifiable by 
        the information specified in subparagraph (A).
 
    Section 16. Custodian compliance and immunity.
    (a) Not later than 60 days after receipt of the information 
required under Sections 7 through 15, a custodian shall comply 
with a request under this Act from a fiduciary or designated 
recipient to disclose digital assets or terminate an account.  
If the custodian fails to comply, the fiduciary or designated 
recipient may apply to the court for an order directing 
compliance.
    (b) An order under subsection (a) directing compliance must 
contain a finding that compliance is not in violation of 18 
U.S.C. Section 2702, as amended.
    (c) A custodian may notify the user that a request for 
disclosure or to terminate an account was made under this Act.
    (d) A custodian may deny a request under this Act from a 
fiduciary or designated recipient for disclosure of digital 
assets or to terminate an account if the custodian is aware of 
any lawful access to the account following the receipt of the 
fiduciary's request.
    (e) This Act does not limit a custodian's ability to obtain 
or require a fiduciary or designated recipient requesting 
disclosure or termination under this Act to obtain a court 
order which:
        (1) specifies that an account belongs to the person 
    with a disability or principal;
        (2) specifies that there is sufficient consent from the 
    person with a disability or principal to support the 
    requested disclosure; and
        (3) contains a finding required by law other than this 
    Act.
    (f) A custodian and its officers, employees, and agents are 
immune from liability for an act or omission done in good 
faith, except for willful and wanton misconduct, in compliance 
with this Act.
 
    Section 17. (Blank).
 
    Section 18. Relation to Electronic Signatures in Global and 
National Commerce Act. This Act modifies, limits, or supersedes 
the Electronic Signatures in Global and National Commerce Act, 
15 U.S.C. Section 7001 et seq., but does not modify, limit, or 
supersede Section 101(c) of that Act, 15 U.S.C. Section 
7001(c), or authorize electronic delivery of any of the notices 
described in Section 103(b) of that Act, 15 U.S.C. Section 
7003(b).
 
    Section 19. Severability.  If any provision of this Act or 
its application to any person or circumstance is held invalid, 
the invalidity does not affect other provisions or applications 
of this Act which can be given effect without the invalid 
provision or application, and to this end the provisions of 
this Act are severable.
  
 
    Section 20. The Criminal Code of 2012 is amended  by 
changing Sections 17-51 and 17-54 as follows:
 



    (720 ILCS 5/17-51)  (was 720 ILCS 5/16D-3)


    Sec. 17-51. Computer tampering. 

    (a) A person commits
computer tampering when he or she 
knowingly and without the authorization of a
computer's owner 
or in excess of
the authority granted to him or her:


        (1) Accesses or causes to be accessed a computer or any 
    part thereof, a computer network, or
a program or data;


        (2) Accesses or causes to be accessed a computer or any 
    part thereof, a computer network, or
a program or data, and 
    obtains data or services;


        (3) Accesses or causes to be accessed a computer or any

    part thereof, a computer network, or a program or data, and 
    damages or destroys the computer or
alters, deletes, or 
    removes a computer program or data;


        (4) Inserts or attempts to insert a program into a 
    computer or
computer program knowing or having reason to 
    know that such program contains
information or commands 
    that will or may: 
            (A) damage or destroy that computer,
or any other 
        computer subsequently accessing or being accessed by 
        that
computer;
            (B) alter, delete, or remove a computer program or

        data from that computer, or any other computer program 
        or data in a
computer subsequently accessing or being 
        accessed by that computer; or
            (C) cause loss to the users of that computer or the 
        users of a
computer which accesses or which is accessed 
        by such program; or 


        (5) Falsifies or forges electronic mail transmission 
    information or
other
routing information in any manner in 
    connection with the transmission of
unsolicited bulk 
    electronic mail through or into the computer network of an

    electronic mail service provider or its subscribers.

    (a-5) Distributing software to falsify routing 
information. It is unlawful for any person knowingly to sell, 
give, or
otherwise
distribute or possess with the intent to 
sell, give, or distribute software
which:

        (1) is primarily designed or produced for the purpose 
    of facilitating or
enabling the falsification of 
    electronic mail transmission information or
other routing 
    information; 
        (2) has only a limited commercially significant

    purpose or use other than to facilitate or enable the 
    falsification of
electronic
mail transmission information 
    or other routing information; or 
        (3) is
marketed by that person or another acting in 
    concert with that person with
that person's knowledge for 
    use in facilitating or enabling the falsification
of

    electronic mail transmission information or other routing 
    information.

    (a-10) For purposes of subsection (a),  accessing a computer 
network is deemed to be with the authorization of a
computer's 
owner if:
        (1) the owner authorizes patrons, customers, or guests 
    to access the computer network and the person accessing the 
    computer network is  an authorized patron, customer,  or 
    guest and complies with all terms or conditions for use of 
    the computer network that are imposed by the owner; or
        (2) the owner authorizes the public to access the 
    computer network and the person accessing the computer 
    network complies with all terms or conditions for use of 
    the computer network that are imposed by the owner; or .
        (3) The person accesses the computer network in 
    compliance with the Revised Uniform Fiduciary Access to 
    Digital Assets Act (2015).

    (b) Sentence.


        (1) A person who commits computer
tampering as set 
    forth in subdivision (a)(1) or (a)(5) or subsection (a-5) 
    of this
Section is guilty
of a Class B misdemeanor.


        (2) A person who commits computer tampering as set 
    forth
in subdivision (a)(2) of this Section is guilty of a 
    Class A misdemeanor
and a Class 4 felony for the second or 
    subsequent offense.


        (3) A person who commits computer tampering as set 
    forth
in subdivision (a)(3) or (a)(4) of this Section is 
    guilty of a Class 4 felony
and a Class 3 felony for the 
    second or subsequent offense.


        (4) If an injury arises from the transmission of 
    unsolicited bulk
electronic
mail, the injured person, 
    other than an electronic mail service
provider, may also 
    recover attorney's fees and costs, and may elect, in lieu 
    of
actual damages, to recover the lesser of $10 for each 
    unsolicited
bulk electronic mail message transmitted in 
    violation of this Section, or
$25,000 per day.  The injured 
    person shall not have a cause of action
against the 
    electronic mail service provider that merely transmits the

    unsolicited bulk electronic mail over its computer 
    network.


        (5) If an injury arises from the transmission of 
    unsolicited bulk
electronic
mail,
an injured electronic 
    mail service provider may also recover
attorney's fees and 
    costs, and may elect, in lieu of actual damages, to recover

    the greater of $10 for each unsolicited electronic mail

    advertisement transmitted in violation of this Section, or 
    $25,000 per day.


        (6) The provisions of this Section shall not be 
    construed to limit any
person's
right to pursue any 
    additional civil remedy otherwise allowed by law.

    (c) Whoever suffers loss by reason of a violation of 
subdivision (a)(4)
of this Section may, in a civil action 
against the violator, obtain
appropriate relief.  In
a civil 
action under this Section, the court may award to the 
prevailing
party reasonable attorney's fees and other 
litigation expenses.

(Source: P.A. 95-326, eff. 1-1-08; 96-1000, eff. 7-2-10; 
96-1551, eff. 7-1-11.)

 



    (720 ILCS 5/17-54)  (was 720 ILCS 5/16D-7)



    Sec. 17-54. Evidence of lack of authority. For the purposes 
of Sections 17-50 through 17-52, the trier of fact may infer 
that a person accessed a computer without the authorization of 
its owner or in excess of the authority granted if the person 
accesses or causes to be accessed a computer, which access

requires a confidential or proprietary code which has not been 
issued to or
authorized for use by that person. This Section 
does not apply to a person who acquires access in compliance 
with the Revised Uniform Fiduciary Access to Digital Assets Act 
(2015). 

(Source: P.A. 96-1551, eff. 7-1-11.)

 
    Section 21. Effective date.  This Act takes effect upon 
becoming law.