093_SB0323
LRB093 09313 RCE 09546 b
1 AN ACT concerning State agencies.
2 Be it enacted by the People of the State of Illinois,
3 represented in the General Assembly:
4 Section 1. Short title. This Act may be cited as the
5 State Agency Web Site Act.
6 Section 5. Definitions. In this Act:
7 "State agencies" has the meaning ascribed to that term in
8 Section 1-7 of the Illinois State Auditing Act.
9 "State agency web site" means a web site connected to the
10 Internet that is owned, operated, or funded by a State
11 agency.
12 "Home page" means the initial page of, or entry point to,
13 a web site.
14 "Privacy policy" means a description of a State agency's
15 information practices with regard to at least the following
16 matters: the services the site provides; the information the
17 agency obtains from individuals online; whether the agency
18 obtains the information directly or indirectly and an
19 explanation of any indirect means used to obtain the
20 information; whether an individual's provision of the
21 requested data is optional or required; a person's option to
22 choose to proceed with the transaction and any alternatives
23 available; how the agency uses the information; whether and
24 under what circumstances the agency discloses the obtained
25 information to other entities or persons; whether other
26 entities or persons are collecting information through the
27 site; and a general description of the security measures in
28 place to protect a person's information without compromising
29 the integrity of the security measures.
30 Section 10. State agency privacy policies.
-2- LRB093 09313 RCE 09546 b
1 (a) Each State agency shall include a privacy policy on
2 the agency's web site. Conspicuous hyperlinks to the privacy
3 policy shall be located on the web site's home page and on
4 other locations on the web site where personal information is
5 collected or tracking technology is used.
6 (b) A State agency may not gather data from users on the
7 agency's web site unless it demonstrates a compelling need to
8 do so. The compelling need, if any, shall be identified as
9 such and stated as part of the privacy policy.