20 ILCS 1005/1005-55

Except as required under State or federal law, the Department shall not disclose an individual's entire social security number in any correspondence physically mailed to an individual or entity. The Department shall develop a process that allows for identifying information other than an individual's entire social security number to be used in correspondence. This Section does not apply to electronic data sharing pursuant to a written agreement containing appropriate security and confidentiality provisions or to an individual's or entity's access to information in the individual's or entity's secure account in the Department's databases.