Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

IL HB5581: ILLINOIS PRIVACY RIGHTS ACT

Dead/Failed Illinois · 2023–2024 session

Last verified Oct 11, 2026 · official bill text

HB5581 · where it stands

This bill did not become law (dead/failed) · last action Jan 7, 2025.

What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Illinois's HB 5581 (103rd General Assembly) would have created the Illinois Privacy Rights Act, giving consumers rights to access, correct, delete and obtain a copy of their personal data and to opt out of targeted advertising, sale, or profiling in furtherance of solely automated decisions with legal or similarly significant effects. It would apply only to entities above specified consumer-data thresholds. Died at Session Sine Die on January 7, 2025.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

None: the bill died and never became law. It would have required covered controllers to honor consumer data rights, including opt-outs of solely automated decision profiling.

Key provisions

  1. Consumers would have the right to confirm and access, correct, delete, and obtain a portable copy of their personal data processed by a controller
  2. Consumers could opt out of processing for targeted advertising, sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects
  3. "Consumer" would mean an Illinois resident acting outside a commercial or employment context
  4. The Act would apply to persons that conduct business in Illinois or target products or services to Illinois residents and that, during a 1-year period, controlled or processed the personal data of at least 35,000 unique consumers (excluding payment-only data), or at least 10,000 consumers while deriving more than 25% of gross revenue from selling personal data
  5. The Attorney General would have exclusive enforcement authority, a violation would be an unfair or deceptive practice under the Consumer Fraud Act, and there would be no private cause of action; effective January 1, 2025 as introduced
  6. Introduced February 9, 2024 and referred to Rules Committee; no further action before Session Sine Die January 7, 2025

Latest legislative action

Jan 7, 2025. Session Sine Die

Sponsors

NameRoleDistrict
D Sponsor HD-013

Related and companion bills

Topics and industries

Affected industries

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error