Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
AI Summary
Establishes consumer rights regarding personal data in Illinois, including data access, correction, deletion, and opt-out options, with exemptions for certain persons or entities.
Business Impact
If you process personal data of Illinois consumers, you must ensure compliance with consumer rights or face enforcement actions.
What do these statuses mean? ▼
Introduced
— Filed in the legislature; not yet heard in committee
In Committee
— Assigned to and being reviewed by a legislative committee
Passed
— Approved by one or both chambers; awaiting further action
Signed / Enacted
— Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed
— Vetoed, failed to pass, or session expired without action
Unknown
— Status data not yet available or awaiting classification
Affected Industries
Topics How we classify →
What This Means
The Illinois Consumer Data Privacy Act aims to enhance consumer rights related to personal data. It mandates businesses to provide transparency and control over data processing, impacting those who handle significant consumer data in Illinois, with exemptions for certain persons or entities.
Key Provisions
- Establishes consumer rights to access, correct, delete, and opt out of data processing.
- Applies to businesses processing data of at least 100,000 consumers or 25,000 consumers with over 50% of gross revenue from data sales.
- Grants exclusive enforcement authority to the Attorney General.
- Creates a Consumer Privacy Fund administered by the Attorney General's office.
- Exempts certain persons or entities from the provisions of the Act.
- Amends the Freedom of Information Act to protect data assessments.
Latest Legislative Action
Rule 3-9(a) / Re-referred to Assignments
Bill Sponsors
| Name | Role |
|---|---|
| Sue Rezin | Primary |
Compliance Checklist
Implement processes to confirm data processing and respond to consumer requests.
Who: Businesses processing personal data of Illinois consumers.
Penalty: Potential enforcement actions by the Attorney General.
Who: Businesses processing personal data of Illinois consumers.
Penalty: Potential enforcement actions by the Attorney General.
Establish a mechanism for consumers to opt out of targeted advertising and data sales.
Who: Businesses subject to the Act.
Penalty: Potential enforcement actions by the Attorney General.
Who: Businesses subject to the Act.
Penalty: Potential enforcement actions by the Attorney General.
Related & Companion Bills
Full Legal Analysis
The Illinois Consumer Data Privacy Act creates a framework for consumer rights concerning personal data. It requires businesses that control or process personal data of at least 100,000 consumers, or 25,000 consumers with over 50% of gross revenue from data sales, to comply with various consumer rights, including the right to confirm data processing, correct inaccuracies, delete data, and opt out of targeted advertising. The Attorney General will have exclusive enforcement authority, and a Consumer Privacy Fund will be established for this purpose. The bill also amends the Freedom of Information Act to exempt certain data assessments from disclosure, reflecting a commitment to data protection. Certain persons or entities are exempt from the provisions of the Act. Compliance will be crucial for affected businesses to avoid potential penalties and enforcement actions.
Official Source
Official Bill Text
View SB 3220 on official legislature website →
Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all published AI bills and regulations for Illinois.