In one paragraph
Illinois' SB 51 is mainly a children's online privacy and design-code bill. As introduced, it would require a business whose online service, product, or feature is likely to be accessed by people under 18 to complete a data protection impact assessment, which must address whether the service's algorithms and targeted advertising systems could harm children, and would bar profiling a child by default. Attorney General enforcement only. Introduced January 13, 2025; re-referred to Assignments April 11, 2025 and still pending.
Plain-English summary, written with AI assistance. The official text controls.
What it means for business
None unless enacted: the bill is pending. If enacted, businesses with online services likely to be accessed by minors would need documented impact assessments, covering algorithms and ads.
Key provisions
- Sec. 10(a)(1): a business would have to complete a data protection impact assessment before offering any new online service, product, or feature likely to be accessed by children, and review it biennially
- The assessment would have to address, to the extent applicable, whether algorithms and targeted advertising systems used by the service could harm children, and whether design features extend children's use
- Sec. 10(b)(2): a business could not profile a child by default (profiling = automated processing of personal information to evaluate a person) unless it shows safeguards plus a necessity or compelling best-interests reason
- Sec. 10(b): would also bar uses of a child's data the business knows or has reason to know are materially detrimental, default collection of precise geolocation unless strictly necessary, and certain dark patterns; Sec. 10(a)(6): high-privacy default settings required unless a compelling best-interests reason is shown
- Sec. 20: assessments due by July 1, 2026 for services already offered to the public before that date
- Sec. 25: Attorney General civil action only, up to $2,500 per affected child per negligent violation and $7,500 per intentional violation; businesses in substantial compliance with Sec. 10(a)(1)-(4) get notice and 90 days to cure; no private right of action
- Sec. 15 would create a Children's Data Protection Working Group (report due January 1, 2026 and every 2 years; repealed January 1, 2032)
- Status: introduced January 13, 2025; Senate Committee Amendments 1 and 2 were filed but not adopted; re-referred to Assignments April 11, 2025
Latest legislative action
Apr 11, 2025. Rule 3-9(a) / Re-referred to Assignments
Sponsors
| Name | Role | District |
|---|---|---|
| Mary Edly-Allen D | Sponsor | SD-031 |
| Susan Rezin R | Sponsor | SD-038 |
Amendments (2)
-
Senate Amendment 001 Not adopted 2025-03-13
-
Senate Amendment 002 Not adopted 2025-03-19
Topics and industries
Affected industries
This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error