Re: [update] Social Security data puts 1.3 mil. voters at risk: suit

[Chris Walsh <cwalsh () cwalsh org>]

Illinois' law is at http://www.ilga.gov/legislation/publicacts/fulltext.asp?Name=094-0036

In discussing form of notice, the law says that so-called substitute notice
may be used under certain conditions:

(c) For purposes of this Section, notice to consumers may
be provided by one of the following methods:
        (1) written notice;
        (2) electronic notice, if the notice provided is
    consistent with the provisions regarding electronic
    records and signatures for notices legally required to be
    in writing as set forth in Section 7001 of Title 15 of the
    United States Code; or
        (3) substitute notice, if the data collector
    demonstrates that the cost of providing notice would exceed
    $250,000 or that the affected class of subject persons to
    be notified exceeds 500,000, or the data collector does not
    have sufficient contact information. Substitute notice
    shall consist of all of the following: (i) email notice if
    the data collector has an email address for the subject
    persons; (ii) conspicuous posting of the notice on the data
    collector's web site page if the data collector maintains
    one; and (iii) notification to major statewide media.


_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 145 million compromised records in 542 incidents over 7 years.