No. The Illinois law applies to unauthorized acquisitions of computerized data. We do not believe that providing an account number and balance in writing to someone other than the account owner, whether at a teller line or by mailing a monthly statement to the wrong address, would trigger the customer notification requirements of the Act.
However, the federal “Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice” requires you to notify your customer in the event that a misuse of “sensitive customer information” has occurred or is reasonably possible. “Sensitive customer information” does not need to be in the form of computerized data, so it is possible that the scenarios described above might trigger notice requirements under federal law. Whether a misuse of the information has occurred or is reasonably possible depends on the unique facts and circumstances of each event of an unauthorized access.