Seven basic concepts associated with the privacy and security of criminal history record information were audited: accuracy and completeness, dissemination limitations and logging, correction and error notification, delinquent disposition monitoring, audit and quality control, security, and individual access and review. An audit questionnaire, on-site inspections, and record audits were used in conducting the audit. Inadequacies were found in the procedures for conducting systematic audits, for identifying delinquent dispositions and the type of information an authorized noncriminal justice agency may receive, and for converting manual records of persons still active in the criminal justice system to the Computerized Criminal History File. The audit also revealed that the statutory requirements regulating criminal history recordkeeping and privacy and security concerns in Illinois are confusing, contradictory, and ambiguous. In addition, the Department of Law Enforcement needs to clarify its own internal procedures in some areas with respect to efficient recordkeeping practices. Fifteen specific findings are reported, together with Law Enforcement Department responses and specific ICJIC recommendations. Four appendices are included.