Establishes consumer rights regarding personal data in Illinois, including data access, correction, deletion, and opt-out options. Verified against metadata only (85%).
If you process personal data of Illinois consumers, you must ensure compliance with consumer rights or face enforcement actions.
What do these statuses mean? ▼
Affected Industries
Topics How we classify →
What This Means
The Illinois Consumer Data Privacy Act aims to enhance consumer rights related to personal data. It mandates businesses to provide transparency and control over data processing, impacting those who handle significant consumer data in Illinois. Verified against metadata only (85%).
Key Provisions
- Establishes consumer rights to access, correct, delete, and opt out of data processing.
- Applies to businesses processing data of at least 100,000 consumers or 25,000 consumers with significant revenue from data sales.
- Grants exclusive enforcement authority to the Attorney General.
- Creates a Consumer Privacy Fund administered by the Attorney General's office.
- Exempts certain entities from the provisions of the Act.
- Amends the Freedom of Information Act to protect data assessments. Verified against metadata only (85%).
Latest Legislative Action
Rule 2-10 Committee/3rd Reading Deadline Established As May 15, 2026
Bill Sponsors
| Name | Role |
|---|---|
| Sue Rezin | Primary |
Compliance Checklist
Who: Businesses processing personal data of Illinois consumers.
Penalty: Potential enforcement actions by the Attorney General.
Who: Businesses subject to the Act.
Penalty: Potential enforcement actions by the Attorney General.
Related & Companion Bills
Full Legal Analysis
Full Analysis for Subscribers
Get the complete legal breakdown, compliance checklist, enforcement timeline, and expert commentary on SB 3220.
Unlock Full Analysis →Official Source
Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all AI bills and regulations tracked for Illinois.