Bill > SB0050

This bill establishes the Illinois Age-Appropriate Design Code Act, which creates comprehensive privacy protections for children under 18 years old when they interact with online services, products, and features. The legislation requires covered entities (businesses that meet certain revenue or data processing thresholds) to conduct thorough data protection impact assessments that evaluate potential risks to children, such as physical, financial, psychological, or emotional harm. Businesses must configure default privacy settings to high levels of protection, provide clear and age-appropriate privacy information, and offer tools for children or parents to exercise privacy rights. The bill prohibits practices like profiling children by default, collecting unnecessary personal data, processing location data without clear consent, and using manipulative design techniques (called "dark patterns") to exploit children. If a covered entity violates these requirements, they can be subject to civil penalties of up to $2,500 per child for negligent violations or $7,500 per child for intentional violations, with enforcement conducted exclusively by the Illinois Attorney General. The law will take effect on January 1, 2026, giving businesses time to adapt their online services to comply with the new child-focused privacy standards. Importantly, the bill explicitly aims to protect children's rights and freedoms while creating a framework for more responsible digital design.

Government Affairs

https://www.ilga.gov/legislation/BillStatus.asp?DocNum=50&GAID=18&DocTypeID=SB&SessionID=114&GA=104