Bill > HB2913

This bill creates the Data Broker Registration and Accessible Deletion Mechanism Act, which establishes new requirements for data brokers (businesses that collect and sell personal information about individuals without a direct relationship) operating in the state. Starting January 31 annually, data brokers must register with the Attorney General, pay a registration fee, and provide detailed information about their data collection practices, including whether they collect information about minors, geolocation, and reproductive health data. The Attorney General will create a public website listing these registrations. By January 1, 2027, the Attorney General must establish an accessible online mechanism that allows consumers to request deletion of their personal information from multiple data brokers through a single, verifiable request. Data brokers will be required to process these deletion requests within 45 days, delete the consumer's information, and refrain from selling or sharing new personal information without consent. The bill includes enforcement mechanisms, such as civil penalties for non-compliance (up to $200 per day for failing to register) and the ability for the Attorney General to investigate violations under consumer fraud statutes. All registration fees will be deposited into a new Data Broker Registry Fund, and starting in 2029, data brokers must undergo independent third-party audits every three years to ensure compliance with the law's requirements.

Military Affairs and Security

https://www.ilga.gov/legislation/BillStatus.asp?DocNum=2913&GAID=18&DocTypeID=HB&SessionID=114&GA=104