summary
Introduced
02/05/2026
02/05/2026
In Committee
02/05/2026
02/05/2026
Crossed Over
Passed
Dead
Introduced Session
104th General Assembly
Bill Summary
Creates the Consumer Data Privacy Act. Establishes certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer's personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer. Defines terms. Applies to persons who conduct business in Illinois or produce products or services that are targeted to Illinois residents and that during the a calendar year control or process person data of at least 100,000 consumers or 25,0000 consumers and derives over 50% of gross revenue from the sale of personal data. Makes requirements for persons or entities that control and process consumer data and also exempts certain persons or entities from the statutory provisions of the Act. Provides that the Attorney General has exclusive authority to enforce the consumer data privacy rights. Creates the Consumer Privacy Fund to be administered by the Office of the Attorney General. Amends the Freedom of Information Act. Exempts from disclosure data protection impact assessments done under the Illinois Consumer Data Privacy Act. Makes a conforming change in the State Finance Act.
AI Summary
This bill, the Consumer Data Privacy Act, establishes new rights for Illinois residents regarding their personal data, allowing them to confirm if their data is being processed, correct inaccuracies, delete their data, obtain a copy of previously provided data, and opt out of targeted advertising, the sale of their data, or profiling that leads to significant decisions about them. The Act applies to businesses that operate in Illinois or offer products/services to Illinois residents and process personal data of at least 100,000 consumers annually, or 25,000 consumers if over 50% of their gross revenue comes from selling personal data. It outlines responsibilities for businesses that control and process consumer data, with certain exemptions for entities like government bodies, financial institutions, healthcare providers, non-profits, and educational institutions. The Attorney General will have exclusive authority to enforce these rights, and any civil penalties collected will go into a new Consumer Privacy Fund administered by their office. Additionally, the bill amends the Freedom of Information Act to exempt "data protection impact assessments" conducted under this new Act from public disclosure.
Sponsors (1)
Last Action
Referred to Assignments (on 02/05/2026)
bill text
bill summary
Loading...
bill summary
Loading...
bill summary
Loading...