Confidential information and funds guide
Protect client information and transaction funds
A seller's lowest price, a buyer's bank document and an earnest-money check need different decisions. Identify what you hold, whose interests are involved and what authority governs its use. Protecting one item does not authorize you to disclose or spend another.
Last reviewed:
The short answer
Illinois agency confidentiality protects defined client information, including negotiating positions, subject to specific exceptions. It does not hide material information about property condition. Personal-data security is a separate duty that can matter even without an agency relationship. Funds held for others must follow the applicable custody, separation, accounting and release rules. Verify changed payment instructions independently, keep usable records and distinguish commingling from unauthorized use. Closing does not automatically end confidentiality, accounting or record-retention responsibilities.
Reviewed for October 2026. The PSI booklet dated June 24, 2026 places confidential personal information and funds of others at National X.C.1 and X.C.2. The whole Practice of Real Estate area accounts for 12 of 100 scored national broker items, or 12%; these topics have no separate published quota. General security guidance and Illinois-specific legal rules are identified separately. These original teaching questions are not official or recalled PSI items.
Make a separate decision about information and money
- Identify the category. Client negotiating information, statutory personal information, ordinary transaction records and funds belonging to others have different rules. A customer's data is not free to disclose merely because the customer is not your client.
- Check authority before using it. Read the client relationship, applicable disclosure duty, contract and custody instructions. A client instruction cannot override a required physical-condition disclosure, and a party's demand does not automatically settle disputed escrow rights.
- Limit access and keep the records secure. Use approved systems and access appropriate to the task. Assess outside tools and vendors before sharing client documents. CISA recommends MFA, preferably phishing-resistant protection where available; this guidance is distinct from the applicability of a particular legal rule.
- Verify payment changes independently. Do not rely on a familiar display name or the callback number supplied in a suspicious message. If funds were misdirected, contact the financial institution immediately and report promptly through the appropriate channel.
- Keep funds separate and traceable. Deliver receipts and instruments into the sponsor's documented process. Record the transaction, permitted account, deposit, entitlement and disbursement authority. Do not keep a check personally while waiting for contingencies.
- Reconcile and investigate differences. Compare the adjusted bank balance, the books and the supported individual balances, including any narrowly permitted and separately recorded broker bank funds. A total that balances does not cure an improper payment or another client's deficit.
- Retain what the law requires, then dispose securely when eligible. Do not erase files at closing or apply a generic security deletion period over a legal retention duty or hold. If escrow records are lost, use the specific report-and-reconstruction rule rather than borrowing a deadline from another type of incident.
| Item | Decision | Useful record |
|---|---|---|
| Seller's minimum acceptable price | Apply agency confidentiality and its actual exceptions | Authorized instruction and communication record |
| Known latent material adverse physical fact | Apply the specific disclosure duty; a secrecy request does not make material physical information confidential | Condition facts and dated disclosure |
| Personal data in a customer file | Assess applicable privacy law and reasonable safeguards | Access, vendor and retention records |
| Changed wire instructions | Verify through an independently trusted channel | Verification record, not just the suspicious email |
| Earnest money held for the parties | Use lawful custody, account and release authority | Receipt, journal, ledger and supporting instrument |
| Monthly escrow reconciliation | Use the rule's receipt-based clock and stated exception | Adjusted bank, books and supported balances |
| Lost, stolen or destroyed escrow records | Report to the Division within 48 hours and reconstruct immediately | Loss report and reconstructed account evidence |
| Completed engagement | Keep the applicable surviving duties and retention requirements | Secure, indexed records and lawful disposal decision |
The distinctions that matter
| Distinction | How it works | What to notice |
|---|---|---|
| Agency confidentiality and personal-data protection | Agency confidentiality is a defined client-information category. Privacy and security obligations use their own scope and can protect a nonclient's records. | No agency does not mean permission to publish a financial document. |
| Negotiating information and physical-condition information | A price limit or private negotiating urgency can qualify without a written secrecy request. Material physical-condition information is expressly excluded from the agency definition. | Do not use a seller's written instruction to conceal a fact that the law requires you to disclose. |
| Commingling and conversion | Commingling improperly mixes funds. Conversion involves unauthorized use or control; replacing the money later does not make the prior use authorized. | A short borrowing period is still not permission. |
| A documented bank minimum and operating money | The permitted broker sum must be specifically documented for service charges, with proof that it does not exceed the depository's minimum needed to maintain the account without those charges. | This is not a discretionary reserve for operating bills or a flat allowance imported from another state. |
| Balanced accounting and lawful entitlement | Matching totals help verify the books. They do not establish that a disputed party is entitled to a payment or that each client's balance is correct. | Reconciliation is a control, not a release authorization. |
| Security guidance and legal coverage | CISA and FBI security advice is useful broadly. The FTC Safeguards Rule applies to covered financial institutions based on their activities and jurisdiction. | A brokerage label alone neither proves coverage nor establishes an exemption. |
Work through the facts
A price limit needs no special label
During representation, a seller tells the licensee the lowest price the seller would accept. The seller does not write a separate confidentiality request.
- The information concerns the client's negotiating position.
- That is an independent statutory category, not a category that exists only after a written request.
Answer: Keep it confidential unless an actual exception authorizes or requires disclosure. Do not publish the limit simply because no separate secrecy form was signed.
A physical defect cannot become a bargaining secret
A seller-engaged licensee actually knows a latent material adverse physical defect that a reasonably diligent prospective buyer-customer inspection would not discover. The seller demands secrecy.
- Material physical-condition information is excluded from the confidentiality definition.
- The supplied facts establish the specific seller-licensee duty to the prospective buyer customer.
Answer: Make the required timely disclosure. Do not replace actual knowledge with speculation or import this particular duty into a differently stated relationship.
A changed payment instruction
A familiar-looking message supplies a new wire destination and urges immediate action.
- Verify the change through an independently trusted number.
- Do not use the phone number in the suspicious message.
Answer: Pause the transfer. If it was already sent, contact the financial institution immediately and report the suspected fraud; recovery is not guaranteed.
An outside tool is not automatically an authorized recipient
A licensee wants to upload an identifiable buyer's financial documents to an unapproved outside service to save time.
- Permission to work on the transaction is not blanket permission to disclose its data to a new vendor.
- Assess the business need, authority, applicable security duties and vendor controls first.
Answer: Use the brokerage's approved process. Do not assume a public service is safe, or that every use of an outside tool is categorically unlawful.
A temporary operating-account deposit
Earnest money held for buyer and seller is placed with the firm's operating money overnight for convenience.
- The parties' money was mixed with business funds.
- Convenience and a short duration do not establish a lawful exception.
Answer: This presents commingling. If the firm also uses the funds without authority, unauthorized use is a separate concern; later replacement does not cure it.
A required bank minimum
The depository requires a $500 minimum to maintain this escrow account without service charges. The supplied facts establish that the broker's separately recorded $500 serves that purpose, with the required documentation and proof.
- The broker sum does not exceed the stated depository minimum.
- The rule requires specific documentation and available proof.
- This does not authorize ordinary operating funds or use of client money.
Answer: Apply the narrow documented minimum-balance exception. Do not turn it into an unrestricted bank-fee or business-expense allowance.
A three-way reconciliation
The bank statement shows $18,000. A supported $1,200 deposit is in transit and $700 of checks are outstanding. The books show $18,500. Client balances total $18,000. The facts establish a lawful, separately recorded $500 broker balance, documented with proof as no more than the depository minimum to maintain the account without service charges.
- Adjusted bank: 18,000 +1,200 -700 =18,500.
- Supported balances: 18,000 +500 =18,500.
- The three totals agree under the supplied facts.
Answer: The calculation reconciles. It does not prove every underlying receipt or disbursement is authorized; retain the supporting records and investigate each account.
Competing demands do not make the broker the judge
After termination, buyer and seller make conflicting earnest-money demands. No presently effective contract direction, agreed written authority or court order resolving this dispute is supplied.
- A personal view about who breached is not release authority.
- The written-or-actually-known dispute matters under the rule.
Answer: Protect the funds and follow the applicable contract and Illinois dispute process. Do not promise automatic release after a generic 14-day wait or treat a commission dispute as permission to hold another party's money.
A net total can hide a client shortage
One client account has an unexplained $200 shortage while another has a $200 positive balance. Someone nets them to zero and marks the issue resolved.
- 200 minus 200 equals zero as arithmetic.
- The clients have separate interests; a positive balance for one does not authorize using it to cover another.
- Investigate the discrepancy and correct it lawfully, with records of what happened.
Answer: Do not conceal the shortage through netting, relabelling or unauthorized transfers. A matching aggregate does not establish accurate individual accounts.
Mistakes to avoid
- Only information labelled confidential in writing is protected. Negotiating position and material negotiating harm are separate statutory triggers.
- Closing frees the broker to use old client information or unaccounted money. Apply the surviving confidentiality and accounting duties and required retention.
- A customer's financial file is public because there is no agency. Privacy law and security duties have a separate scope.
- Every real estate license automatically creates identical FTC obligations. Assess the actual covered activities and jurisdiction.
- A balanced total proves the broker can release the money. Entitlement, disputes and individual balances remain separate issues.
- Every incident has the same 48-hour notification clock. The identified 48-hour rule concerns lost, stolen or destroyed escrow records and notice to the Division.
Check your understanding
These are original teaching questions, not recalled or predicted PSI questions. Answer first, then explain why the other choices fail.
1. A seller gives the listing licensee a minimum acceptable price during representation, without a separate written secrecy request. Which statement fits the Illinois definition?
- The client must pay an extra confidentiality fee
- Only information on a signed secrecy form can qualify
- The amount becomes public after the first offer
- Negotiating-position information can qualify independently of a written secrecy request
Show answer and explanation
Answer: D. Negotiating-position information can qualify independently of a written secrecy request
The definition uses alternative categories. Client negotiating information can qualify without a separate written request, subject to the actual statutory exceptions.
2. The supplied seller-licensee facts establish actual knowledge of a latent material adverse physical defect, not reasonably discoverable by the prospective buyer customer. The seller requests secrecy. What matters?
- Every client instruction controls disclosure
- A written request turns the defect into confidential information
- Material physical-condition information is excluded, and the supplied disclosure duty applies
- The broker may substitute a guess that an inspection will discover it
Show answer and explanation
Answer: C. Material physical-condition information is excluded, and the supplied disclosure duty applies
The confidentiality definition excludes material physical information. Apply the specific duty on the supplied seller-engaged, prospective buyer-customer facts rather than using secrecy to conceal the known defect.
3. Which fact is one of the definition's actual exceptions to agency confidentiality?
- The broker wants a faster sale
- The information becomes public from a source other than the licensee
- The licensee publishes it first
- The other party offers to pay for it
Show answer and explanation
Answer: B. The information becomes public from a source other than the licensee
The definition identifies this public-source exception, client permission by word or conduct, and disclosure required by law. The licensee cannot create this exception by making the information public through the licensee's own disclosure.
4. Under the ordinary rule in 15-30, which duties are expressly retained after the engagement?
- Every former task continues indefinitely
- Only future advertising duties
- Accounting for transaction money/property and confidentiality of qualifying information
- No further accounting or confidentiality can be owed
Show answer and explanation
Answer: C. Accounting for transaction money/property and confidentiality of qualifying information
Section 15-30 retains these duties and has an opening written-agreement qualification. This is not a blanket right to waive other mandatory law or a reason to treat every statement as confidential forever.
5. A financial document belongs to a customer whom the licensee does not represent. What is the sound conclusion?
- Only represented clients can have personal information
- Nonagency alone does not authorize disclosure; assess applicable privacy and security duties
- Nonclients' financial records may always be published
- An agency warning replaces every privacy law
Show answer and explanation
Answer: B. Nonagency alone does not authorize disclosure; assess applicable privacy and security duties
Agency status and personal-data protection answer different questions. Lack of representation is not blanket authorization to expose another person's financial records.
6. A user enters two passwords as the only access checks. What distinguishes MFA?
- Two passwords are both knowledge checks, not two different factor categories
- Only a text code can qualify as another factor
- Passwords can never protect any account
- Every two-step login is automatically two distinct factors
Show answer and explanation
Answer: A. Two passwords are both knowledge checks, not two different factor categories
MFA uses different identity-verification factors. CISA recommends stronger phishing-resistant options where available; security guidance should not be mislabelled a universal Illinois licensing mandate.
7. A familiar-looking email changes a wire destination. What is the sound first response?
- Call the number supplied in that email
- Verify the change using an independently trusted contact channel
- Send a small test transfer to the new destination
- Assume the familiar display name proves authenticity
Show answer and explanation
Answer: B. Verify the change using an independently trusted contact channel
Pause and verify independently. Do not keep the verification inside the suspicious message's channel.
8. Does a real estate brokerage label alone establish identical FTC Safeguards Rule coverage for every firm?
- Yes, every licensee has identical coverage regardless of activity
- No, because no brokerage can ever perform a covered activity
- No; assess covered activities and FTC jurisdiction under the actual rule
- Yes, and every record must be destroyed exactly two years after closing
Show answer and explanation
Answer: C. No; assess covered activities and FTC jurisdiction under the actual rule
The FTC guide makes coverage depend on the business's activities and jurisdiction, not just its name. This page does not decide a particular firm's compliance program.
9. Earnest money held for both parties is put into an ordinary operating account for convenience. Which issue is clearest?
- Client permission established by silence
- An automatic bank-purpose exception
- Commingling
- A completed reconciliation
Show answer and explanation
Answer: C. Commingling
The parties' funds were mixed with operating funds. A brief period or planned later correction does not establish a lawful exception.
10. A broker uses client funds for an operating bill without authority and replaces them the next day. What is the sound distinction?
- Replacement makes the original use authorized
- Unauthorized use is not cured merely by later replacement
- No violation is possible unless the client permanently loses money
- Only the account title matters
Show answer and explanation
Answer: B. Unauthorized use is not cured merely by later replacement
Conversion concerns unauthorized use or control. Later replacement does not retroactively create authority; separate accounting and disciplinary consequences still need their own facts.
11. A broker sum is documented for service charges, with available proof that it does not exceed the depository's minimum to maintain the escrow account without those charges. Which statement is accurate?
- Apply the limited exception and keep the separate record and proof
- The exception permits borrowing from a client ledger
- Every state's flat allowance automatically applies in Illinois
- It authorizes any ordinary operating expense from escrow
Show answer and explanation
Answer: A. Apply the limited exception and keep the separate record and proof
Apply the specific documentation, proof and depository-minimum limit. This is not permission to keep ordinary operating money in escrow, use client funds, or import another jurisdiction's flat allowance.
12. Buyer and seller dispute escrow entitlement, with no lawful authority resolving release supplied. What should the broker avoid?
- Preserving the account records
- Reading the actual contract
- Choosing a winner based only on the broker's view of breach
- Following the applicable Illinois dispute process
Show answer and explanation
Answer: C. Choosing a winner based only on the broker's view of breach
The broker needs the applicable contractual, written, judicial or other lawful basis. Personal preference is not an escrow adjudication.
13. Adjusted bank and books both show $18,500. Client balances total $18,000 and a lawful, separately recorded $500 broker sum meets the documented depository-minimum exception. What does that establish?
- Every disputed release is authorized
- The broker owns all $18,500
- The supplied totals agree, without certifying every underlying payment
- An individual client deficit can always be ignored
Show answer and explanation
Answer: C. The supplied totals agree, without certifying every underlying payment
18,000 plus 500 equals 18,500. Agreement is an accounting check, not a ruling on entitlement, individual accuracy or lawful disbursement.
14. For an account with the relevant transactional activity, which event starts the rule's 10-day monthly reconciliation period?
- Receipt of the monthly bank statement
- The first day of the calendar month
- Closing of the last transaction in the account
- The date printed on the bank statement
Show answer and explanation
Answer: A. Receipt of the monthly bank statement
Rule 1450.750(i)(3) uses receipt of the monthly statement and has its stated no-previous-month-transaction exception. Do not replace receipt with the statement's printed date.
15. Escrow records are lost, stolen or destroyed. What does 1450.755(d) require?
- Wait for the next annual audit
- Report to the Division within 48 hours and immediately obtain available records to reconstruct
- Delete the remaining account records to avoid inconsistency
- Notify every client within 48 hours under every privacy law
Show answer and explanation
Answer: B. Report to the Division within 48 hours and immediately obtain available records to reconstruct
The specific rule calls for the Division report and immediate reconstruction using bank statements, deposit/disbursement receipts and other available records. It is not a universal privacy-breach notice clock.
16. Which statement correctly limits the 750(a) escrow definition?
- All owner-held security deposits are exempt from every housing law
- Every payment to any licensee is automatically earned brokerage income
- The definition includes mutual-benefit consideration and has specific sole-owner deposit and written rent-transmittal qualifications
- Payment form alone always decides escrow status
Show answer and explanation
Answer: C. The definition includes mutual-benefit consideration and has specific sole-owner deposit and written rent-transmittal qualifications
Read the actual definition and qualifications. A 750 classification does not erase other custody, client-accounting, contract or state and local security-deposit duties. It does not establish that a particular form of consideration is lawful.
Common questions
What counts as confidential client information in Illinois?
Section 1-10 covers information obtained from a client during the brokerage agreement that was made confidential by written request or instruction, concerns the negotiating position, or could materially harm that position if disclosed. The alternatives matter. Material physical-condition information is excluded.
Does a client need to request secrecy in writing for a price limit?
No separate written request is needed for information that independently falls within the negotiating-position or material-harm categories. Still apply the actual exceptions; the definition is not a promise to conceal every fact.
When can qualifying client information be disclosed?
The definition identifies client permission by word or conduct, disclosure required by law, and information that becomes public from a source other than the licensee. Do not manufacture the last exception by leaking the information. Other legal duties still matter.
Do confidentiality and accounting end at closing?
Not automatically. Section 15-30 expressly retains accounting for transaction money/property and confidentiality of qualifying information after termination, expiration or completion, with its opening written-agreement qualification. Required disclosures and other mandatory duties are not erased.
Can I freely share documents from an unrepresented customer?
No. Agency confidentiality and personal-data protection have different scopes. Assess the applicable law, authority, purpose, safeguards and vendor arrangements. A no-agency notice does not turn a financial file into public information.
What should I do about changed wire instructions?
Verify independently before sending. If money was misdirected, contact the financial institution immediately and report promptly to the appropriate authorities, including IC3. Do not assume a callback number in the suspicious message is trustworthy or that recovery is guaranteed.
Is MFA the same as entering two passwords?
No. Different identity-verification factors matter. CISA recommends MFA across suitable systems and stronger phishing-resistant options where available. It is security guidance, not proof that every brokerage has identical legal coverage or that any method prevents every attack.
Does the FTC Safeguards Rule apply to every brokerage automatically?
Assess actual covered activities and FTC jurisdiction. A brokerage name alone establishes neither automatic coverage nor automatic exclusion. The FTC definition extends beyond ordinary banks.
What is escrow money under the Illinois special-account rule?
Read 750(a): consideration held for the parties' mutual benefit in the defined transaction, including earnest money and covered security deposits. The rule has a sole-owner security-deposit exception and a written-agreement rent-transmittal qualification. Neither is an exemption from every other law or client-accounting obligation.
Can any broker money be held in an escrow account?
The rule permits the specifically documented service-charge sum only with available proof that the broker's own funds do not exceed the depository's minimum required to maintain the account without service charges. Keep it separately accounted for. This is not an unrestricted fee reserve or permission to use client funds.
What is the difference between commingling and conversion?
Commingling is improper mixing. Conversion involves unauthorized use or control. One situation can raise both concerns. A short period, an intent to repay or later replacement does not by itself supply authority.
Does a buyer demand or a commission dispute authorize release?
Not by itself. Use the actual contract, valid written directions, court authority and applicable Illinois process. A written or actually known contest matters under the rule. The broker cannot choose an escrow winner by preference or use another party's money as leverage for a commission.
When must an Illinois escrow account be reconciled?
The rule uses 10 days after receipt of the monthly bank statement, with its stated exception when there was no transactional activity in the previous month. Compare adjusted bank, books and supported individual balances. Matching totals do not excuse a wrong individual account or unauthorized release.
What if escrow records are lost, stolen or destroyed?
Rule 1450.755(d) calls for a report to the Division's enforcement division within 48 hours and immediate collection of available bank statements, deposit/disbursement receipts and other records to reconstruct. Assess privacy, fraud and other incident obligations separately.
Can transaction records be deleted when the deal closes?
No blanket closing-date deletion rule applies. Follow the relevant retention class, clock, order and hold. The identified escrow record rule has a five-year retention requirement; reconciliation records also have their own specific clock. When eligible for disposal, use the applicable secure-disposal requirements rather than exposing readable personal data.
How do journals and ledgers differ?
A journal follows receipts and disbursements chronologically. Individual ledgers organize the activity and balance by the relevant transaction, property or account. Reconciliation connects the supported balances with the books and adjusted bank statement; a bank statement alone is not the whole record system.
Does the FTC guidance erase a longer Illinois retention requirement?
No. For covered firms, the FTC disposal provision has legitimate-business and legal-retention exceptions. It is not a universal instruction to destroy brokerage records two years after closing.
Keep practising
Your next practice step
Put handling transaction funds into practice
Identify the holder, written authority, deposit and disbursement conditions.
These web resources are free. The app has a separate free starter tier and optional paid full access.
Official sources and scope
The national outline identifies the topics; Illinois law supplies the state-specific confidentiality and special-account rules used here. Security recommendations are identified as guidance. Use the particular legal definition, record class and incident trigger rather than treating this page as an approval of a live release, data disclosure or breach response.
- PSI Illinois Candidate Information Booklet dated June 24, 2026
- 225 ILCS 454/1-10: confidential information
- 225 ILCS 454/15-15: client duties
- 225 ILCS 454/15-30: duties after the engagement
- 225 ILCS 454/15-25: the specific seller-licensee customer duty
- 225 ILCS 454/15-35, agency and no-agency disclosure
- 68 Ill. Adm. Code 1450.800, confidentiality safeguards
- 68 Ill. Adm. Code 1450.750: escrow, transfers, release, records and supervision
- 68 Ill. Adm. Code 1450.755(a)(1)-(2): escrow records and retention
- 225 ILCS 454/20-20(a)(16)-(17), (22), (39): accounting, separation and release conditions
- Illinois Personal Information Protection Act: security and disposal
- FBI: business email compromise and changed payment instructions
- CISA: require multifactor authentication
- FTC: Safeguards Rule coverage and information security
This is exam preparation, not advice for a specific transaction. State law and the applicable facts control. Our editorial and corrections process explains how to report an issue.