The Illinois Consumer Data Privacy Act grants consumers rights over their personal data, applying to certain businesses, with exemptions for some entities, enforced by the Attorney General.
If you process personal data of Illinois residents, you must implement consumer rights protocols by the effective date or face enforcement actions.
What do these statuses mean? ▼
Affected Industries
Topics How we classify →
What This Means
The Illinois Consumer Data Privacy Act introduces significant consumer rights regarding personal data, impacting businesses that handle such data. It mandates transparency and control for consumers over their personal information, including rights to access, correct, delete data, and opt out of profiling. The bill applies to businesses operating in Illinois that control or process data of at least 100,000 consumers or 25,000 consumers with over 50% revenue from data sales, creating new compliance requirements. It also establishes the Consumer Privacy Fund administered by the Office of the Attorney General. Additionally, it amends the Freedom of Information Act to exempt data protection impact assessments from disclosure and makes a conforming change in the State Finance Act. The Attorney General has exclusive authority to enforce the consumer data privacy rights under the Act. While the official description mentions exemptions, the full bill text might specify which entities are exempt.
Key Provisions
- Consumers can confirm if their data is being processed.
- Consumers have the right to correct inaccuracies in their personal data.
- Consumers can request deletion of their personal data.
- Businesses must provide copies of personal data upon request.
- Entities must comply if they process data of 100,000 consumers or 25,000 with over 50% revenue from data sales.
- Consumers have the right to opt out of targeted advertising, the sale of data, or profiling of the consumer.
- The Attorney General has exclusive enforcement authority.
- While the official description mentions exemptions, the full bill text might specify which entities are exempt.
- Creation of the Consumer Privacy Fund administered by the Office of the Attorney General.
- Amends the Freedom of Information Act to exempt data protection impact assessments from disclosure.
- Makes a conforming change in the State Finance Act.
Latest Legislative Action
Rule 3-9(a) / Re-referred to Assignments
Bill Sponsors
| Name | Role | District |
|---|---|---|
| Susan Rezin R | Sponsor | SD-038 |
Compliance Checklist
Who: Businesses processing personal data of Illinois residents.
Penalty: Enforcement actions by the Attorney General.
Who: Businesses processing personal data of Illinois residents.
Penalty: Enforcement actions by the Attorney General.
Related & Companion Bills
Full Legal Analysis
Official Source
Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all published AI bills and regulations for Illinois.