|
|
|
09500SB1675sam001 |
- 2 - |
LRB095 10970 LCT 32882 a |
|
|
| 1 |
| "Breach of the security of system data" and "data |
| 2 |
| collector" shall have the meanings ascribed to those terms in |
| 3 |
| the Personal Information Protection Act. |
| 4 |
| (815 ILCS 145/3 new) |
| 5 |
| Sec. 3. Liability of data collector. Notwithstanding any |
| 6 |
| other provision of law, whenever a credit card or debit card is |
| 7 |
| used to obtain money, goods, services, or anything else of |
| 8 |
| value: (i) without the consent or authorization of the rightful |
| 9 |
| owner of the credit card or debit card; and (ii) as a result of |
| 10 |
| a breach of the security of system data by a data collector or |
| 11 |
| by an employee or agent of a data collector, the data collector |
| 12 |
| shall be liable to any financial institution that incurs costs |
| 13 |
| or damages relating to the unauthorized access to the account |
| 14 |
| or accounts of the rightful owner of the credit card or debit |
| 15 |
| card. The liability of the data collector to the financial |
| 16 |
| institution shall include, but not be limited to, any costs |
| 17 |
| incurred in connection with the cancellation or reissuance of a |
| 18 |
| credit card or debit card; the closing of any deposit, |
| 19 |
| transaction, draft, credit, or other account and any action |
| 20 |
| necessary to stop payment or block transactions with respect to |
| 21 |
| any such account; the opening or reopening of any deposit, |
| 22 |
| transaction, draft, credit, or other account on behalf of the |
| 23 |
| rightful owner of the debit card or credit card; and any refund |
| 24 |
| or credit made to the rightful owner of the credit card or |
| 25 |
| debit card as a result of the unauthorized transactions.".
|