CONSUMER DATA PRIVACY Verified

Affected Industries

Topics

What This Means

The Illinois Data Privacy Protection Act enhances consumer rights regarding personal data. It applies to businesses processing significant amounts of consumer data and establishes compliance requirements, including data breach notifications and consumer access rights. This legislation will impact how companies handle personal data in Illinois, with the Attorney General overseeing consumer data management across data brokers, allowing consumers to manage and delete their personal information with registered data brokers. The Act also includes a severability provision.

Key Provisions

• Establishes consumer rights to access, correct, and delete personal data.
• Requires businesses to notify consumers of data breaches.
• Mandates annual registration for data brokers with the Attorney General, including a public webpage for consumer data management and deletion with registered data brokers.
• Creates the Data Privacy Protection Fund.
• Imposes civil penalties for non-compliance.
• Limits home rule powers regarding data privacy.
• Excludes personal data processed solely for payment transactions.
• Requires consideration of purposes and means in data processing security.
• Allows consumers to question the profiling of their information.
• Includes a severability provision.
• Amends the Personal Information Protection Act.

Latest Legislative Action

Rule 2-10 Committee Deadline Established As April 24, 2026

Full Legal Analysis