Get emailed when this bill changes status, is amended, or advances.
Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
The Consumer Data Privacy Act establishes consumer rights regarding personal data, amends the State Finance Act, and creates the Consumer Privacy Fund for enforcement and education.
The Consumer Data Privacy Act enhances consumer rights related to personal data in Illinois. It applies to businesses processing significant consumer data, targeting Illinois residents, and outlines specific consumer rights, with exemptions.
Key Provisions
Establishes consumer rights to access, obtain a copy of, correct, delete, and opt out of data processing.
Applies to businesses processing data of at least 100,000 consumers, or processing data of at least 25,000 consumers and deriving over 50% of gross revenue from the sale of personal data.
Grants exclusive enforcement authority to the Attorney General specifically for consumer data privacy rights.
Creates the Consumer Privacy Fund for enforcement and consumer education, administered by the Office of the Attorney General.
Amends the Freedom of Information Act to exempt data protection assessments.
Amends the State Finance Act.
Exempts certain persons or entities from the statutory provisions of the Act.
Implement protocols for consumer data access, correction, and deletion requests. Who: Businesses processing personal data of Illinois residents. Penalty: Enforcement actions by the Attorney General.
Establish a process for consumers to opt out of targeted advertising and data sales. Who: Businesses subject to the Act. Penalty: Potential enforcement actions.
The Consumer Data Privacy Act creates a framework for consumer rights concerning personal data in Illinois. It grants consumers the right to confirm whether their data is being processed, obtain a copy of their personal data, correct inaccuracies, delete their data, and opt out of targeted advertising and data sales. The bill applies to entities that conduct business in Illinois or target Illinois residents, specifically those that control or process data of at least 100,000 consumers, or process data of at least 25,000 consumers and derive over 50% of gross revenue from the sale of personal data. Non-compliance could lead to enforcement actions by the Attorney General, who has exclusive authority under this Act specifically for consumer data privacy rights. The bill defines key terms such as 'personal data,' 'controller,' and 'processor.' Certain persons or entities are exempt from the statutory provisions of the Act. Additionally, the bill amends the State Finance Act and exempts data protection impact assessments from disclosure under the Freedom of Information Act. The Consumer Privacy Fund is administered by the Office of the Attorney General for enforcement and consumer education.
We use cookies for analytics to understand how visitors use this site. We also use essential cookies for site functionality.
See our Privacy Policy for details.