820 ILCS 40/8

An employer shall review a personnel record before releasing information to a third party and, except when the release is required under Section 8.5 or ordered to a party in a legal action or arbitration, delete disciplinary reports, letters of reprimand, or other records of disciplinary action which are more than 4 years old. This Section does not apply to a school district or an authorized employee or agent of a school district who is sharing information related to an incident or an attempted incident of sexual abuse, severe physical abuse, or sexual misconduct as defined in subsection (c) of Section 22-85.5 of this Code.