What privacy obligations apply to customer data collected by alarm contractors in Illinois?

• A. Ignore data protection laws.
• B. Share with advertisers.
• C. Contractors must protect customer information, disclose only to authorized parties, and comply with relevant privacy laws.
• D. Publish to a public registry.

Answer: (C)

Protecting customer data and following the law is the core obligation for Illinois alarm contractors. You’re handling personal information, so you must put reasonable security measures in place to keep it safe—think strong access controls, secure storage, encryption where feasible, and training employees on data handling. Data should only be disclosed to authorized parties who need it to perform services (such as technicians, monitoring centers, or contracted vendors) and to law enforcement when properly authorized. You should have clear policies guiding who can see or share information and under what circumstances.

You must also comply with relevant privacy laws. In Illinois, this includes statutes like the Personal Information Protection Act, which covers safeguarding personal data and breach-notification requirements, along with any other applicable privacy or data-security laws. Having a privacy policy and an incident-response plan helps ensure you meet these obligations.

Choices that ignore data protection, involve sharing customer data with advertisers, or publish it publicly would breach these obligations and expose you to legal and reputational risk.