Bill > HB5221

This bill, titled the Consumer Data Privacy Act, establishes new rules for how businesses handle personal data of Illinois residents, taking effect on January 1, 2027. It grants consumers rights such as the ability to confirm if their data is being processed, access, correct, and delete their personal data, and obtain a portable copy of their data. Crucially, consumers will have the right to opt out of the sale of their personal data, targeted advertising (which is defined as ads selected based on a consumer's past online activities to predict their preferences), and profiling for automated decisions that have significant legal or similarly significant effects on them, such as decisions about financial services or housing. The Act also outlines responsibilities for data controllers (entities that determine the purposes and means of data processing) and processors (entities that process data on behalf of controllers), including requirements for data security and transparency through privacy notices. It includes specific provisions for small businesses and makes conforming changes to the Freedom of Information Act, while also preempting local home rule authority on these matters.

https://www.ilga.gov/Legislation/BillStatus?DocNum=5221&GAID=18&DocTypeID=HB&SessionID=114&GA=104