The Illinois Data Privacy Protection Act establishes consumer rights, requires data processing considerations, creates the Data Privacy Protection Fund, and authorizes the Attorney General to enforce the Act.
If you process personal data of 100,000 consumers in Illinois, you must implement security measures and notify consumers of breaches or face civil penalties.
What do these statuses mean? ▼
Affected Industries
Topics How we classify →
What This Means
The Illinois Data Privacy Protection Act aims to enhance consumer rights regarding personal data. It applies to businesses that handle large volumes of consumer data, requiring them to consider the purposes and means of processing personal data in protecting security and provide transparency about data processing practices. This legislation empowers consumers to access, correct, and question the profiling of their personal data, while also imposing registration requirements on data brokers. The bill amends the Personal Information Protection Act and the State Finance Act, limits the concurrent exercise of home rule powers, and authorizes the Attorney General to enforce the Act, with registration information accessible to the public via the Attorney General's website.
Key Provisions
- Establishes consumer rights to access, correct, and question profiling of personal data, and obtain a list of third parties to whom data has been disclosed.
- Requires businesses to implement security measures for data processing, considering the purposes and means of processing.
- Mandates annual registration for data brokers with the Attorney General.
- Imposes civil penalties for non-compliance.
- Limits the concurrent exercise of home rule powers.
- Excludes personal data processed solely for payment transactions from the 100,000 consumer threshold.
- Makes registration information accessible to the public via the Attorney General's website.
- Amends the Personal Information Protection Act and the State Finance Act.
- Creates the Data Privacy Protection Fund.
- Includes a severability provision.
- Authorizes the Attorney General to enforce the Act.
Latest Legislative Action
Rule 3-9(a) / Re-referred to Assignments
Bill Sponsors
| Name | Role | District |
|---|---|---|
| Rachel Ventura D | Sponsor | SD-043 |
Compliance Checklist
Who: Businesses processing data of 100,000 consumers or more
Penalty: Civil penalties for non-compliance
Who: Data brokers operating in Illinois
Deadline: By January 31 each year
Penalty: Civil penalties for non-compliance
Related & Companion Bills
Full Legal Analysis
Official Source
Related Topics
Affected Industries
More Illinois AI Legislation
View All IL Laws →More Illinois AI Laws
Browse all published AI bills and regulations for Illinois.