Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

IL SB3548: CONSUMER DATA PRIVACY ACT

In Committee Illinois · 2025–2026 session

Last verified Oct 25, 2026 · official bill text

SB3548 · where it stands

1 of 5 steps complete
  1. Introduced In committee
  2. Passed first chamber
  3. Passed both chambers
  4. Enacted
  5. Effective
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Illinois's SB 3548 (104th General Assembly) would create the Consumer Data Privacy Act, giving consumers rights to confirm whether personal data is processed, correct and delete it, obtain a copy, and opt out of targeted advertising, data sales or profiling. It would apply to persons controlling or processing data of at least 100,000 consumers, with Attorney General enforcement. Last action: re-referred to Assignments May 22, 2026.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

Not law. If enacted, covered businesses would have to honor consumer data rights, including opt-outs of profiling, and face Attorney General enforcement.

Key provisions

  1. Would create the Consumer Data Privacy Act with consumer rights to confirm, correct, delete and obtain a copy of personal data
  2. Consumers could opt out of targeted advertising, the sale of data, or profiling
  3. Per the synopsis, applies to persons doing business in Illinois or targeting Illinois residents that in a calendar year control or process personal data of at least 100,000 consumers, or of fewer consumers while deriving over 50% of gross revenue from selling personal data
  4. The Attorney General would have exclusive enforcement authority, and a Consumer Privacy Fund would be administered by that Office
  5. Would exempt data protection impact assessments from disclosure under the Freedom of Information Act
  6. Status: Rule 3-9(a) re-referral to Assignments on May 22, 2026 (also for Senate Committee Amendment No. 1)

Latest legislative action

May 22, 2026. Rule 3-9(a) / Re-referred to Assignments

Sponsors

NameRoleDistrict
R Sponsor SD-038

Amendments (1)

  • Senate Amendment 001 Not adopted 2026-02-24

Related and companion bills

Topics and industries

Related topics

AI PrivacyAutomated Decision-Making

Affected industries

TechnologyConsumer Protection

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error

Related AI laws in Illinois

All Illinois bills →
SB2398 SPORTS WAGERING-AI RESTRICTION HB5221 CONSUMER DATA PRIVACY ACT SB 3735 Educ-Tech Rts/Biometric Info SB3657 CONSUMER FRAUD-DIGITAL PRICING HB4987 SURVEILLANCE-BASED WAGES SB2255 SURVEILLANCE DISCRIMINATION

Same topic in other states

Connecticut SB1295 An Act Concerning Broadband Internet, Gaming, Social Media, Online Services and Vermont S0071 An act relating to consumer data privacy and online surveillance Maryland HB603 Consumer Protection - Online Products and Services - Data of Children (Maryland Rhode Island S146 Video Lottery Games, Table Games And Sports Wagering -- The Rhode Island Consume New York S08524 Enacts the New York privacy act to require companies to disclose their methods o Pennsylvania HB78 Consumer Data Privacy Act