The Consumer Data Privacy Act establishes consumer rights regarding personal data, preempts home rule, and amends the Freedom of Information Act for conformity.
If you process personal data in Illinois, you must allow consumers to opt out of data processing for targeted advertising by January 1, 2027, or face civil penalties.
What do these statuses mean? ▼
Affected Industries
Topics How we classify →
What This Means
The Consumer Data Privacy Act aims to enhance consumer rights regarding personal data in Illinois. It mandates that businesses allow consumers to opt out of targeted advertising and profiling. The bill outlines responsibilities for data controllers and processors, including small businesses, provides for civil penalties for non-compliance, preempts home rule, and amends the Freedom of Information Act.
Key Provisions
- Establishes consumer rights to opt out of targeted advertising and profiling.
- Defines responsibilities for data controllers and processors.
- Provides for civil penalties for non-compliance.
- Preempts home rule regarding data privacy regulations.
- Sets requirements for small businesses regarding data processing.
- Amends the Freedom of Information Act for conformity.
Latest Legislative Action
Rule 19(a) / Re-referred to Rules Committee
Bill Sponsors
| Name | Role | District |
|---|---|---|
| Edgar Gonzalez D | Sponsor | HD-023 |
Compliance Checklist
Who: Businesses processing personal data in Illinois.
Deadline: By January 1, 2027.
Penalty: Civil penalties for non-compliance.
Who: Data controllers and processors.
Deadline: By January 1, 2027.
Penalty: Civil penalties for non-compliance.
Full Legal Analysis
Official Source
Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all published AI bills and regulations for Illinois.