The Rising Stakes of Data Privacy.

Whether you’re running a family-owned retail shop, growing a medical practice, or managing multiple office locations, if you handle customer or employee data, privacy compliance applies to you.

In Illinois, two of the strictest privacy laws in the country—the Biometric Information Privacy Act (BIPA) and the Personal Information Protection Act (PIPA)—create clear legal obligations that can cost thousands (or millions) if ignored.

As an IT consultant who works with small and midsize businesses across the state, I’m here to break down what you need to know and how you can protect your business before problems arise.

Understanding Key Illinois Privacy Laws

Biometric Information Privacy Act (BIPA)

BIPA regulates how private businesses collect, use, and store biometric data like fingerprints, facial scans, and retina scans. It requires:

• Informed written consent before collecting or storing biometric data.
• Disclosure of the specific purpose and storage duration.
• A public retention and destruction policy.
• A strict prohibition on selling or profiting from biometric data.
• Private right of action, meaning individuals can sue your business for violations.

Even something as common as a fingerprint time clock or facial recognition camera falls under BIPA. Penalties and fines can be applied for violations of negligence, recklessness or intentional action.

Personal Information Protection Act (PIPA)

PIPA focuses on safeguarding broader categories of personal data, including Social Security numbers, driver’s license numbers, medical and health insurance information, account numbers, and login credentials.

It requires:

• Prompt breach notification to affected Illinois residents.
• Reporting breaches to the Illinois Attorney General (if 500+ individuals are impacted).
• Reasonable security measures to protect data.
• Proper disposal of sensitive data.
• Contracts with third parties that require them to maintain security.

Violations are considered unlawful practices under the state’s Consumer Fraud Act and can result in enforcement actions.

Common Compliance Pitfalls

Despite the legal requirements, many businesses unintentionally fall short. Here are some of the most common missteps:

• Using biometric time clocks without proper notice or consent.
• Collecting customer or employee data without a written policy or retention schedule.
• Failing to implement encryption, firewalls, or access controls.
• Assuming that cloud storage providers automatically ensure compliance.
• Not having an incident response plan or breach notification process.

Often, the biggest risk comes not from bad intentions but from lack of awareness.

Steps Toward Compliance: IT Consultant’s Checklist

Here is a practical checklist to help your business align with Illinois privacy laws:

1. Audit Your Data: Know what types of personal and biometric data you collect, where it’s stored, who has access, and how long you keep it.
2. Create a Written Privacy Policy: Include clear language about data collection, usage, retention, and destruction.
3. Implement Consent Procedures: Obtain written consent before collecting biometric data and explain how it will be used.
4. Secure Your Systems: Use encryption, secure user authentication, regular patching, and monitoring to protect stored data.
5. Train Your Employees: Ensure your staff understands data privacy procedures and how to respond to data incidents.
6. Plan for Breaches: Develop and test an incident response plan, including breach notification protocols.
7. Review Vendor Contracts: Make sure service providers who access your data agree to meet your security requirements.

The Cost of Non-Compliance

Non-compliance isn’t just a legal problem—it can be a business-ending event. Illinois courts have upheld massive BIPA settlements, with some cases costing businesses millions in damages. A single fingerprint scan collected without consent can lead to multiple violations, each carrying its own penalty.

With PIPA, a data breach could force you to notify thousands of customers, face scrutiny from the Attorney General, and deal with damaged customer trust.

Tools and Tech That Can Help

Fortunately, the right tools can make compliance manageable:

• Consent management platforms to track and store written consents.
• Data loss prevention (DLP) software to monitor sensitive information.
• Security information and event management (SIEM) tools for real-time alerts.
• Encryption solutions for both stored and transmitted data.
• Automated backups with secure, offsite storage.

Don’t overlook free or low-cost training platforms to keep your team informed.

Make Privacy a Business Priority

Privacy compliance isn’t a one-time fix—it’s an ongoing responsibility. If you collect any form of personal or biometric data, you are legally and ethically responsible for protecting it.

By investing in secure systems, clear policies, and proper staff training, you’re not just avoiding fines—you’re building customer trust and long-term resilience.

If you’re unsure where to start or whether your current practices meet Illinois standards, now is the time to act.

Local IT consultants, privacy professionals can help you:

• Audit your systems and data handling practices
• Develop legally sound policies and consent forms
• Deploy the right technologies for security and monitoring
• Train your team to maintain compliance

Don’t wait until a lawsuit or a breach that forces your hand. Reach out to a trusted local technology expert today and take control of your privacy compliance strategy.

This content was originally posted on Medium

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

I’ve met countless professionals who believe that earning certifications like CISSP, CISM, Security+, etc. is the key to advancing their careers. And while certifications are valuable—they demonstrate expertise, commitment, and a solid understanding of best practices—there’s one critical skill they don’t teach: how to communicate security and technology risks in a way that leadership understands.

I have several myself: CISSP, PMP, ITIL, MCSE and more — each one has helped me gain deeper technical knowledge and industry credibility. But none of them, on their own, prepared me for the real challenge of leadership: translating complex security concepts into business priorities.

A few weeks ago, I spoke with a colleague who had just completed a major certification. He was feeling confident about his technical knowledge, but then he walked into a leadership meeting and was asked to explain why his team’s proposed security initiative mattered to the business. He knew the technical details inside and out, but when it came to making the case to executives—framing security as a business priority rather than a technical challenge—he struggled.

That moment made it clear: Certifications don’t prepare you for the real challenges of leadership.

The Gap Between Certifications and Real-World Leadership

Certifications focus on frameworks, methodologies, and compliance—which are important. But in the real world, professionals must be able to:

• Translate security risks into business impact.
• Justify IT investments in terms of ROI.
• Persuade leadership to prioritize security initiatives.

I’ve seen too many skilled IT professionals hit a ceiling in their careers—not because they lack knowledge, but because they struggle to communicate complex ideas in a way that decision-makers care about.

For example, if you’re discussing Zero Trust security with your executive team, you need to go beyond saying,

“Zero Trust limits network access to reduce attack surfaces.”

Instead, translate that into business terms:

“Zero Trust ensures that only the right people have access to critical systems, reducing the likelihood of a data breach that could cost us millions in fines and lost customer trust.“

This shift in communication changes the conversation—and ultimately determines whether your initiatives get the support they need.

Three Skills Every Cybersecurity and IT Leader Needs

If you want to stand out and drive real change, focus on developing these three essential leadership skills:

1. Storytelling & Business Impact

Leaders don’t respond to jargon and technical specs—they respond to narratives that connect security to real business challenges.

• Instead of saying: “We need to implement multi-factor authentication (MFA) to strengthen security.”
• Say: “Over 80% of breaches come from weak passwords. MFA would immediately reduce our risk of unauthorized access, protecting both our data and our reputation.”

The difference? One statement sounds like an IT upgrade. The other sounds like a business necessity.

2. Risk-Based Decision Making

Security isn’t about eliminating all risks—it’s about prioritizing the most critical ones without disrupting operations.

• Understand risk appetite — how much risk your company is willing to tolerate.
• Learn how to quantify risk in dollars — leaders want to know what a security failure could cost the business.
• Frame recommendations in terms of business value, not just security best practices.

Example: Instead of saying, “This patch reduces vulnerabilities,” explain, “This patch could prevent an outage that would cost us $50K in lost revenue per hour.”

3. Stakeholder Influence & Negotiation

Your ability to secure buy-in for security initiatives determines whether they actually get implemented.

• Speak the language of finance, operations, and executive leadership—not just IT.
• Identify the real drivers behind security decisions (often compliance, customer trust, or financial impact).
• Build relationships before you need them—so when a crisis arises, decision-makers already trust your expertise.

If you can’t convince the CFO or CEO why security investments matter, even the best technology solutions will go underfunded or deprioritized.

How to Develop These Skills (Beyond Certifications)

So, how do you bridge the gap between technical expertise and executive influence?

1. Start practicing now. Present security insights to non-technical colleagues and get feedback on clarity.
2. Study leadership communication. Take courses on storytelling, negotiation, and business strategy.
3. Follow cybersecurity leaders who articulate security in business terms—watch how they frame discussions.
4. Get involved in executive-level conversations. Don’t just sit in IT meetings—engage with finance, operations, and leadership.

The professionals who stand out are the ones who combine technical depth with the ability to communicate its value to the business.

Certifications prove what you know—but your ability to connect security to business priorities is what sets you apart.

If you’re serious about advancing in cybersecurity or IT leadership, ask yourself:
Are you just learning technical frameworks, or are you preparing to lead?

Tech skills get you in the door. Communication skills put you at the table.

Are you ready for that next-level conversation?

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

Here’s the full interview:

Get the bonus Q&A with the audience by visiting GreatTechPros.com.

Here are a few video clips from the discussion:

• Business Partnerships, Relationships and Trust.
• Working with a Partner to help meet a Client Objectives.
• Contractors, Vendors and meeting client needs.
• Handling Partnership Challenges.
• Partner Expertise and Education.
• Post-Interview: Thoughts on the Value of Business Partnerships.

Connect with Traci: 

You can connect with Traci on Linkedin and by visiting Temple-IT.com. 

Watch or Listen to Great Tech Pros anytime, anywhere.

• Watch on YouTube, 
• Tune in on Facebook Watch, 
• Listen on Google Podcasts, 
• Be all ears on Spotify, 
• Eavesdrop on Apple Podcasts, 
• and more.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

Here’s the full interview:

Get the bonus Q&A with the audience by visiting GreatTechPros.com.

Here are a few video clips from the discussion:

• Difference between Individual Contributor to Business Leader.
• Defining a Win as Individual Contributor vs Business Leader.
• Challenges when Moving into Tech Management.

You can connect with Jason on Linkedin, Facebook and Github. 

Watch or Listen to Great Tech Pros anytime, anywhere.

• Watch on YouTube, 
• Tune in on Facebook Watch, 
• Listen on Google Podcasts, 
• Be all ears on Spotify, 
• Eavesdrop on Apple Podcasts, 
• and more.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

Here’s the full interview:

Get the bonus Q&A with the audience by visiting GreatTechPros.com.

Useful Links:

• You can connect with Sean on Linkedin. 
• Regulatory Compliance in the United States. 

Watch or Listen to Great Tech Pros anytime, anywhere.

• Watch on YouTube, 
• Tune in on Facebook Watch, 
• Listen on Google Podcasts, 
• Be all ears on Spotify, 
• Eavesdrop on Apple Podcasts, 
• and more.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

I was recently featured in an article by the University of Illinois, Gies College of Business, highlighting what I learned as a student in the school’s Master of Business Administration (MBA) degree program and while attending global immersions in Germany and Brazil with my fellow MBA students. Here’s an excerpt from the article titled “Blanchard Uses MBA Experience to Explore near-Shore Tech Options.” ^{1, 2, 3}

Gies College of Business MBA student Wylie Blanchard’s love of technology runs deep. The founder of Chicago-based Great Tech Pros grew up taking apart everything from toasters to his first word processor to see how they worked. His company advises clients primarily in the healthcare and insurance services industries how to design tech solutions that create value for their customers.

Blanchard said the iMBA experience has also taught him to think more globally about how to grow Great Tech Pros, founded in 2013.

Blanchard is exploring setting up near-shore database operations with fellow iMBA student Paul Taylor in his Jamaica home base. He turned to Taylor to create a solution that had a US-friendly time zone when Great Tech Pros couldn’t meet a client’s price point with a US-based solution.

The Gies iMBA program isn’t Blanchard’s first experience with online learning. He received a BS degree in business administration and management from Walden University. Blanchard said interacting with more marketing, strategy and finance decision makers is what prompted him to consider getting a master’s degree.

Visit the University of Illinois at Urbana-Champaign, Gies College of Business, website to read the full article that includes my quoted statements.

“Blanchard Uses MBA Experience to Explore Near-Shore Tech Options.” Gies College of Business, University of Illinois at Urbana-Champaign, 9 Oct. 2020, https://giesbusiness.illinois.edu/news/2020/10/09/blanchard-uses-mba-experience-to-explore-near-shore-tech-options.

“Blanchard Uses MBA Experience to Explore Near-Shore Tech Options.” IMBA, University of Illinois at Urbana-Champaign, 18 May 2021, https://onlinemba.illinois.edu/blanchard-uses-mba-experience-to-explore-near-shore-tech-options/.

“Blanchard Uses MBA Experience To Explore Near-Shore Tech Options.” Poets&Quants. 24 Feb. 2021, https://poetsandquants.com/2021/02/04/blanchard-uses-mba-experience-to-explore-near-shore-tech-options/

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

Here’s the full interview:

Get the bonus Q&A with the audience by visiting GreatTechPros.com.

Here are a few video clips from the discussion:

• What does Smart Technology Roadmapping Mean?
• Smart Technology Automation.
• Journey to a Career in Cannabis Technology
• How has the Product Road Map changed and evolved?
• What’s on your current Road Map?
• What’s changed from Individual Contributor to Company Leader?
• How are you addressing current customer pain points and challenges?
• Current State of the Cannabis Industry.

Useful Links:

• You can connect with Eric on Linkedin.
• Cannabis industry history in the United States.

Watch or Listen to Great Tech Pros anytime, anywhere.

• Watch on YouTube, 
• Tune in on Facebook Watch, 
• Listen on Google Podcasts, 
• Be all ears on Spotify, 
• Eavesdrop on Apple Podcasts, 
• and more.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

Here’s the full interview:

Get the bonus Q&A with the audience by visiting  GreatTechPros.com.

Here are some short video clips of topics discussed:

• What has changed in Business Analytics?
• What is your approach to creating data visualizations?
• Free/Low cost data visualization tools for small businesses.
• What type of data visualization recommendations do you offer to larger businesses that do not have tool/platform preferences?
• What were you doing with CDC?
• What drove you to Analytics & Data Visualization as a Career?

Useful Links:

• You can connect with Teneika on her website, Twitter and Linkedin.
• Tools include PowerQuery, PowerBI, Tableau, Google Data Studio and SAP Tools.
• Though it is important to implement a new platform/solution, it is equally as important to inform and educate end-users on how to utilize the new platform or solution.
• Every career/job has a data component – Do make an effort to learn how to utilize data as a skill. Doing so will enhance your skill-set and help you enhance your career.
• College students should look into scholarship, internship and other opportunities offered by their university like the Thurgood Marshall College Fund (TMCF) and INROADS internships.
• For those who are new to data visualizations, start with Microsoft Excel, work to graduate from a beginner Excel user to an advanced Excel user, then learn Microsoft Power BI and Tableau.
• Microsoft currently offers free Power BI training, Tableau Prep & Tableau Desktop are not free unless you are a student, freeCodeCamp and SimpliLearn.

Watch or Listen to Great Tech Pros anytime, anywhere.

• Watch on YouTube, 
• Tune in on Facebook Watch, 
• Listen on Google Podcasts, 
• Be all ears on Spotify, 
• Eavesdrop on Apple Podcasts, 
• and more.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

In this discussion, we explored the challenges that prevent people from obtaining the career success that they’re working toward, the obstacles that are in place that lock people out of the sales cycle when working to close deals with their high-profile clients and what people and organizations can do to shatter through the glass ceiling so that they can find the career success that they are working toward.

Here’s the discussion.

Here’s the pre-event message that I created leading up to the event.

Useful Links:

• You can find more events from Lotus Bucker on her website, Twitter and Linkedin.
• During the talk, I advised that people should read Shattering the Glass Ceiling: How to Break Through Without Breaking Down by Gia Suggs and Hayward Suggs.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....

Here’s the full interview:

Get the bonus Q&A with the audience by visiting GreatTechPros.com.

Here are some short video clips of topics discussed:

• What does Tectonic Speed of Government mean?
• How do you interact with the local college (University of Illinois)?
• How to get role working in Technology and Government?
• Journey to a Career in Technology & Government.
• Sales Cycle & Technology.
• Skills & Experience we look for in New Employees.
• Training & Education for Technology Generalists.

Useful Links

• You can connect with Sanford on his website and Linkedin. 
• The Tectonic Speed of Government is the website where Sanford shares his thoughts on Government, IT, Change, Government IT Change … and Movies.
• Sanford recommends that aspiring technology professional consider Google IT Support Professional Certificate.

Watch or Listen to Great Tech Pros anytime, anywhere.

• Watch on YouTube, 
• Tune in on Facebook Watch, 
• Listen on Google Podcasts, 
• Be all ears on Spotify, 
• Eavesdrop on Apple Podcasts, 
• and more.

Get more great content at WylieBlanchard.com... Need a great speaker for your next event, contact us to book Wylie Blanchard now.
Learn what clients are saying about his programs....