093_SB0323 LRB093 09313 RCE 09546 b 1 AN ACT concerning State agencies. 2 Be it enacted by the People of the State of Illinois, 3 represented in the General Assembly: 4 Section 1. Short title. This Act may be cited as the 5 State Agency Web Site Act. 6 Section 5. Definitions. In this Act: 7 "State agencies" has the meaning ascribed to that term in 8 Section 1-7 of the Illinois State Auditing Act. 9 "State agency web site" means a web site connected to the 10 Internet that is owned, operated, or funded by a State 11 agency. 12 "Home page" means the initial page of, or entry point to, 13 a web site. 14 "Privacy policy" means a description of a State agency's 15 information practices with regard to at least the following 16 matters: the services the site provides; the information the 17 agency obtains from individuals online; whether the agency 18 obtains the information directly or indirectly and an 19 explanation of any indirect means used to obtain the 20 information; whether an individual's provision of the 21 requested data is optional or required; a person's option to 22 choose to proceed with the transaction and any alternatives 23 available; how the agency uses the information; whether and 24 under what circumstances the agency discloses the obtained 25 information to other entities or persons; whether other 26 entities or persons are collecting information through the 27 site; and a general description of the security measures in 28 place to protect a person's information without compromising 29 the integrity of the security measures. 30 Section 10. State agency privacy policies. -2- LRB093 09313 RCE 09546 b 1 (a) Each State agency shall include a privacy policy on 2 the agency's web site. Conspicuous hyperlinks to the privacy 3 policy shall be located on the web site's home page and on 4 other locations on the web site where personal information is 5 collected or tracking technology is used. 6 (b) A State agency may not gather data from users on the 7 agency's web site unless it demonstrates a compelling need to 8 do so. The compelling need, if any, shall be identified as 9 such and stated as part of the privacy policy.