Bill > SB2121

This bill creates the Privacy Protections for Location Information Derived from Electronic Devices Act, which aims to safeguard individuals' location data by establishing strict rules for how businesses and organizations can collect, process, and use location information. The legislation requires covered entities (which includes most businesses except government agencies) to obtain explicit, informed consent before collecting an individual's location information, and only allows such collection for specific "permissible purposes" like providing a requested service or completing a transaction. Entities must provide a clear location privacy policy, obtain discrete consent for each purpose of data collection, and offer individuals the ability to opt out of targeted advertising. The bill prohibits selling or improperly sharing location data, mandates data destruction after consent expires, and prevents entities from retaining more information than necessary. Individuals can sue for violations, with potential damages of $5,000 per violation or actual damages (whichever is greater), and the court must award attorney's fees to prevailing plaintiffs. The law specifically seeks to protect reproductive health access, LGBTQ safety, religious liberty, and freedom of movement by preventing unauthorized tracking and data sharing, with special provisions limiting government access to location data without a warrant or emergency situation.

Government Affairs

https://www.ilga.gov/legislation/BillStatus.asp?DocNum=2121&GAID=18&DocTypeID=SB&SessionID=114&GA=104