summary
Introduced
02/02/2026
02/02/2026
In Committee
02/10/2026
02/10/2026
Crossed Over
Passed
Dead
Introduced Session
104th General Assembly
Bill Summary
Creates the Illinois Consumer Data Privacy Act. Establishes certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer's personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer. Defines terms. Applies to persons who conduct business in Illinois or produce products or services that are targeted to Illinois residents and that during a calendar year control or process personal data of at least 100,000 consumers or 25,0000 consumers and derive over 50% of gross revenue from the sale of personal data. Creates requirements for persons or entities that control and process consumer data. Exempts certain persons or entities from the provisions of the Act. Provides that the Attorney General has exclusive authority to enforce the consumer data privacy rights. Creates the Consumer Privacy Fund to be administered by the Office of the Attorney General. Amends the Freedom of Information Act. Exempts from disclosure data protection impact assessments created under the Illinois Consumer Data Privacy Act. Makes a conforming change in the State Finance Act.
AI Summary
This bill, titled the Illinois Consumer Data Privacy Act, establishes consumer rights regarding their personal data, including the right to confirm data processing, correct inaccuracies, delete data, obtain a copy of previously provided data, and opt out of targeted advertising, data sales, or profiling. It applies to businesses operating in Illinois or targeting Illinois residents that process personal data of at least 100,000 consumers or 25,000 consumers who also derive over 50% of their gross revenue from selling personal data, and it outlines responsibilities for entities controlling and processing this data. The Attorney General will have exclusive authority to enforce these provisions, with collected penalties funding a Consumer Privacy Fund administered by their office. Additionally, the bill amends the Freedom of Information Act to exempt data protection impact assessments, which are required for certain high-risk data processing activities, from public disclosure.
Committee Categories
Government Affairs
Sponsors (1)
Last Action
Assigned to Executive (on 02/10/2026)
bill text
bill summary
Loading...
bill summary
Loading...
bill summary
Loading...