IL SB3241: AGE-APPROPRIATE DESIGN CODE

In one paragraph

Illinois' SB 3241 is mainly a children's online privacy and design-code bill. As introduced, it would require covered entities (for-profit businesses over set revenue or data thresholds) to complete data protection impact assessments for services reasonably likely to be accessed by children, including whether algorithms and targeted advertising systems could harm children, and would bar profiling a child by default. Introduced February 2, 2026; re-referred to Assignments May 22, 2026.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

None unless enacted: the bill is pending. If enacted, larger for-profit businesses with online services likely to be used by minors would have to document assessments, including algorithm risk.

Key provisions

1. 1Sec. 15: covered entities that operate in Illinois and process children's data would have to do so consistent with the best interests of children
2. 2Sec. 20: would apply to for-profit entities that collect consumers' personal data, determine the purposes and means of processing, and have over $25,000,000 in annual gross revenue (CPI-adjusted), or annually buy, receive, sell, or share for commercial purposes the personal data of 50,000 or more consumers, households, or devices, or derive 50% or more of annual revenue from selling it
3. 3Sec. 25: impact assessment for any online service, product, or feature reasonably likely to be accessed by children; it would have to examine whether algorithms and targeted advertising systems would result in reasonably foreseeable harms to children listed in the bill
4. 4Sec. 30: would bar profiling a child by default unless safeguards and a necessity or compelling best-interests reason are shown, and would also bar certain dark patterns and default processing of precise geolocation unless strictly necessary
5. 5Sec. 50: assessments due by January 1, 2027 for services offered to the public before that date
6. 6Sec. 40: Attorney General civil action only, up to $2,500 per affected child per negligent violation and $7,500 per intentional violation; entities in substantial compliance with Sec. 25 get notice first and, if they did the required assessments, 90 days to cure; no private right of action
7. 7Sec. 99: would take effect upon becoming law; status: introduced February 2, 2026 and re-referred to Assignments May 22, 2026

Latest legislative action

Aug 25, 2026. Added as Co-Sponsor Sen. Darby A. Hills

Sponsors

Related and companion bills

• Illinois SB0050AGE-APPROPRIATE DESIGN CODE
• Illinois SB51AGE-APPROPRIATE DESIGN CODE