The Consumer Data Privacy Act establishes rights for consumers regarding their personal data and mandates compliance for businesses operating in Illinois.
If you process personal data of Illinois residents, you must ensure consumer rights are upheld or face enforcement actions.
What do these statuses mean? ▼
Affected Industries
Topics
What This Means
The Consumer Data Privacy Act aims to enhance consumer rights concerning personal data in Illinois. It applies to businesses that handle significant amounts of consumer data and outlines specific rights for consumers, including data access and deletion. This legislation will impact how companies manage and protect consumer information.
Key Provisions
- Establishes consumer rights regarding personal data processing.
- Applies to businesses processing data of at least 100,000 consumers or 25,000 consumers with over 50% of revenue from data sales.
- Attorney General has exclusive enforcement authority.
- Creates the Consumer Privacy Fund.
- Amends the Freedom of Information Act regarding data assessments.
Latest Legislative Action
Rule 2-10 Committee Deadline Established As April 24, 2026
Compliance Checklist
Who: Businesses processing consumer data in Illinois.
Penalty: Enforcement actions by the Attorney General.
Who: Businesses deriving revenue from the sale of personal data.
Penalty: Enforcement actions by the Attorney General.
Related & Companion Bills
Full Legal Analysis
Full Analysis for Subscribers
Get the complete legal breakdown, compliance checklist, enforcement timeline, and expert commentary on SB3548.
Unlock Full Analysis →Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all AI bills and regulations tracked for Illinois.