Bill > HB4809

This bill, titled the Data Broker Registration and Accessible Deletion Mechanism Act, requires any business that knowingly collects and sells or licenses personal information of individuals with whom they have no direct relationship (a "data broker") to register annually with the Attorney General by January 31st, paying a fee determined by the Attorney General, and providing specific information about their data collection practices, including whether they collect data from minors, precise geolocation, or reproductive health data. The Attorney General will maintain a public website with this registration information and can impose civil penalties for non-compliance, with collected funds going into a Data Broker Registry Fund to administer and enforce the Act. Crucially, by January 1, 2028, the Attorney General must establish a single, accessible online system where consumers can submit a verifiable request to have all their personal information deleted by every data broker that holds it, with provisions for opting out of specific brokers, modifying requests, and ensuring the system is secure, free, and accessible to all consumers, including those with disabilities and those using authorized agents. Data brokers will be required to check this system at least every 45 days to process deletion requests and will face enforcement actions under the Consumer Fraud and Deceptive Business Practices Act for violations.

https://www.ilga.gov/Legislation/BillStatus?DocNum=4809&GAID=18&DocTypeID=HB&SessionID=114&GA=104