The Consumer Data Privacy Act establishes consumer rights regarding personal data processing, including opt-out provisions for targeted advertising and data sales, effective January 1, 2027.
If you process personal data for targeted advertising in Illinois, you must allow consumers to opt out by January 1, 2027, or face civil penalties.
What do these statuses mean? ▼
Affected Industries
Topics
What This Means
The Consumer Data Privacy Act aims to enhance consumer rights regarding personal data processing in Illinois. It mandates that businesses allow consumers to opt out of targeted advertising and data sales, impacting how data is handled. This legislation will require compliance from data processors and controllers, particularly in the context of automated decision-making, and preempts home rule to ensure uniformity across Illinois.
Key Provisions
- Establishes consumer rights to opt out of targeted advertising and data sales.
- Defines responsibilities for data controllers regarding personal data processing.
- Imposes civil penalties for non-compliance with consumer data rights.
- Requires data privacy assessments for businesses handling personal data.
- Sets specific requirements for small businesses regarding data processing.
- Preempts home rule, ensuring uniformity in data privacy regulations across Illinois.
- Amends the Freedom of Information Act.
Latest Legislative Action
Rule 19(a) / Re-referred to Rules Committee
Compliance Checklist
Who: Data controllers and processors
Deadline: By January 1, 2027
Penalty: Civil penalties for non-compliance
Who: Businesses handling personal data
Deadline: By January 1, 2027
Penalty: Civil penalties for non-compliance
Full Legal Analysis
Full Analysis for Subscribers
Get the complete legal breakdown, compliance checklist, enforcement timeline, and expert commentary on HB5221.
Unlock Full Analysis →Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all AI bills and regulations tracked for Illinois.