SECURITY ADDENDUM (ENTERPRISE SAAS)

Illinois Jurisdictional Version

KEY PROVISIONS

Data Breach Notification (815 ILCS 530/10)

• Notify without unreasonable delay
• If >500 Illinois residents, notify Attorney General
• Written notice with description, type of info, contact info, credit monitoring info

BIPA Compliance (740 ILCS 14/1 et seq.)

• Written consent required before collecting biometric data
• Retention schedule and destruction policy required
• No sale or disclosure without consent
• Private right of action with statutory damages ($1,000-$5,000 per violation)

Personal Information Definition

Name with: SSN, driver's license, financial account, medical info, biometric data, health insurance.

Trade Secrets

765 ILCS 1065/1 et seq.

E-Signatures

5 ILCS 175/1-101 et seq.

Late Payment

5% default (815 ILCS 205/4)

Forum

Illinois (exclusive). Jury waiver permitted.

EXECUTION

☐ Master Agreement referenced ☐ BIPA compliance verified ☐ Illinois-licensed counsel review