In one paragraph
Illinois' SB 50 is mainly a children's online privacy and design-code bill. As introduced, it would require covered entities (for-profit businesses over set revenue or data thresholds) to complete data protection impact assessments for services reasonably likely to be accessed by children, including whether algorithms and targeted advertising systems could harm children, and would bar profiling a child by default. Introduced January 13, 2025; re-referred to Assignments April 11, 2025 and still pending.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
None unless enacted: the bill is pending. If enacted, larger for-profit businesses with online services likely to be used by minors would have to document assessments, including algorithm risk.
Key provisions
- Sec. 15: covered entities that operate in Illinois and process children's data would have to do so consistent with the best interests of children
- Sec. 20: would apply to for-profit entities that collect consumers' personal data, determine the purposes and means of processing, and have over $25,000,000 in annual gross revenue (CPI-adjusted), or annually buy, receive, sell, or share for commercial purposes the personal data of 50,000 or more consumers, households, or devices, or derive 50% or more of annual revenue from selling it
- Sec. 25: impact assessment for any online service, product, or feature reasonably likely to be accessed by children; it would have to examine whether algorithms and targeted advertising systems would result in reasonably foreseeable harms to children listed in the bill
- Sec. 30: would bar profiling a child by default unless safeguards and a necessity or compelling best-interests reason are shown, and would also bar certain dark patterns and default processing of precise geolocation unless strictly necessary
- Sec. 50: assessments due by January 1, 2026 for services offered to the public before that date
- Sec. 40: Attorney General civil action only, up to $2,500 per affected child per negligent violation and $7,500 per intentional violation; entities in substantial compliance with Sec. 25 get notice first and, if they did the required assessments, 90 days to cure; no private right of action; penalties go to a new enforcement fund
- Sec. 99: would take effect upon becoming law; status: introduced January 13, 2025 and re-referred to Assignments April 11, 2025
Latest legislative action
Apr 11, 2025. Rule 3-9(a) / Re-referred to Assignments
Sponsors (showing 5 of 50)
| Name | Role |
|---|---|
| Antonio Muñoz | Primary |
| Don Harmon D | Primary |
| Ira I. Silverstein | Primary |
| John J. Cullerton | Primary |
| Linda Holmes D | Primary |
Topics and industries
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error