Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

IL SB 3180: AI DATA PRIVACY ACT

In Committee Illinois

Last verified Oct 25, 2026 · official bill text

SB 3180 · where it stands

1 of 5 steps complete
  1. Introduced In committee
  2. Passed first chamber
  3. Passed both chambers
  4. Enacted
  5. Effective
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Illinois's SB 3180 (104th General Assembly) would create the Artificial Intelligence Data Privacy Act. Beginning January 1, 2027, a deployer would have to either (1) not let its AI train on a user's covered information and retain the training data indefinitely without first informing the user in writing and getting express written consent, or (2) set its AI by default not to train on that information unless the user is notified and affirmatively consents. The bill has private right of action provisions, and a violation would be an unlawful practice under the Consumer Fraud Act. Last action: re-referred to Assignments May 22, 2026.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

Not law. If enacted, businesses deploying AI to Illinois users would have to get consent or default-off settings before training on and indefinitely retaining user data.

Key provisions

  1. Would create the Artificial Intelligence Data Privacy Act, effective January 1, 2027 per the synopsis
  2. Beginning January 1, 2027 a deployer would have to comply with one of two options on training with a user's covered information
  3. Option 1: no training and indefinite retention unless the deployer first informs the user in writing and gets express written consent
  4. Option 2: the default setting bars training on covered information unless the user is notified of indefinite retention and affirmatively consents to change it
  5. A user would be an individual who resides in Illinois and uses a deployed AI; the bill sets out provisions on a private right of action
  6. A violation would be an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act
  7. Status: Rule 3-9(a) re-referral to Assignments on May 22, 2026

Latest legislative action

May 22, 2026. Rule 3-9(a) / Re-referred to Assignments

Sponsors

NameRole
Primary

Topics and industries

Related topics

AI PrivacyUser-Facing AI

Affected industries

TechnologyConsumer Protection

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error

Related AI laws in Illinois

All Illinois bills →
HB4843 VEH CD-PLATES-REGISTRATION HB2557 VIDEO INTERVIEW ACT HB1806 THERAPY RESOURCES OVERSIGHT SB 2995 CONSUMER FRAUD-AI DISCLOSURE SB3548 CONSUMER DATA PRIVACY ACT SB1792 FRAUD-ARTIFICIAL INTELLIGENCE

Same topic in other states

Maine LD2082 An Act to Regulate the Use of Artificial Intelligence in Providing Certain Menta Utah HB452 Artificial Intelligence Amendments California AB 1979 Health care services: artificial intelligence. Colorado HB 1195 Psychotherapy Artificial Intelligence Restrictions Texas HB149 Relating to regulation of the use of artificial intelligence systems in this sta Nebraska LB525 Adopt the Agricultural Data Privacy Act and the Conversational Artificial Intell