Technology

Amends the Consumer Fraud and Deceptive Business Practices Act. Provides that it is an unlawful practice for a high-impact social media company in the State to fail to make available to its customers, at no cost, a customer support service for customers to notify the company of any harmful content that the customer believes is illegal or violates the high-impact social media company's terms of service. Provides that the customer support service must timely respond to customers within one business day after a customer initially contacts the company. Provides that the customer support service must take active steps to resolve the customer's issue or complaint and communicate the steps taken to resolve the issue or complaint with the customer by mail, telephone, or email, as requested by the customer, within 3 business days after a customer initially contacts the company. Provides that the customer support service shall communicate with the customer at least once every 3 business days until the issue has been resolved or until the issue has been determined to be unsolvable. Provides that the Attorney General may bring an action against a high-impact social media company that does not comply with these provisions. Provides that any company that violates these provisions shall be fined $1,000 per day per violation. Provides that fines collected under these provisions shall be deposited into a fund to support mental health awareness in Illinois. Effective January 1, 2026.

Creates the Anti-Click Gambling Data Analytics Collection Act. Provides that no entity that operates a remote gambling platform or a subsidiary of the entity shall collect data from a participant with the intent to predict how the participant will gamble in a particular gambling or betting scenario. Effective immediately.

Amends the Personal Information Protection Act. Provides that a data collector shall not own, maintain, license, store, or disclose records that contain immigration or citizenship status information concerning an Illinois resident. Provides that the provision shall not apply to government agencies, public and private universities, or financial institutions. Provides that the definition of "personal information" includes immigration or citizenship status information. Defines "immigration or citizenship status information".

Amends the Illinois Century Network Act. Provides that the connection of anchor institutions to the Illinois Century Network shall be prioritized according to the type of anchor institution, starting with schools and libraries.

Amends the Higher Education Student Assistance Act. Provides that an institution of higher learning that participates in the Monetary Award Program may not release the personally identifiable information of any of its students for voter registration activities unless the student gives consent in writing.

Amends the Department of Innovation and Technology Act. Provides that, on or before January 1, 2026, the Department of Innovation and Technology shall develop and implement a system that allows users accessing a website operated by the State to automatically translate the contents of that website into another language. Provides that the system shall provide automatic translation to at least the 100 most commonly spoken language in the State. Effective immediately.

Creates the Protect Health Data Privacy Act. Provides that a regulated entity shall disclose and maintain a health data privacy policy that clearly and conspicuously discloses specified information. Sets forth provisions concerning health data privacy policies. Provides that a regulated entity shall not collect, share, or store health data, except in specified circumstances. Provides that it is unlawful for any person to sell or offer to sell health data concerning an individual without first obtaining valid authorization from the individual. Provides that a valid authorization to sell individual health data must contain specified information; a copy of the signed valid authorization must be provided to the individual; and the seller and purchaser of health data must retain a copy of all valid authorizations for sale of health data for 6 years after the date of its signature or the date when it was last in effect, whichever is later. Sets forth provisions concerning the consent required for collection, sharing, and storage of health data. Provides that an individual has the right to withdraw consent from the processing of the individual's health data. Provides that it is unlawful for a regulated entity to engage in discriminatory practices against individuals solely because they have not provided consent to the processing of their health data or have exercised any other rights provided by the provisions or guaranteed by law. Sets forth provisions concerning an individual's right to confirm whether a regulated entity is collecting, selling, sharing, or storing any of the individual's health data; an individual's right to have the individual's health data that is collected by a regulated entity deleted; prohibitions regarding geofencing; and individual health data security. Provides that any person aggrieved by a violation of the provisions shall have a right of action in a State circuit court or as a supplemental claim in federal district court against an offending party. Provides that the Attorney General may enforce a violation of the provisions as an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Defines terms. Makes a conforming change in the Consumer Fraud and Deceptive Business Practices Act.

Amends the Department of Commerce and Economic Opportunity Law of the Civil Administrative Code of Illinois. Provides that the Department of Commerce and Economic Opportunity shall award income tax credits in an amount equal to 13% of the qualifying quantum information science expenditures made by the taxpayer during the taxable year. Amends the Illinois Income Tax Act to make conforming changes. Effective immediately.

Amends the Biometric Information Privacy Act. Provides that the changes made by Public Act 103-769 apply to pending actions as of August 2, 2024, and any actions commenced and complaints filed on or after August 2, 2024. Effective immediately.

Creates the Parental Consent for Social Media Act. Provides that a social media company shall not permit an Illinois user who is a minor to be an account holder on the social media company's social media platform unless the minor has the express consent of a parent or legal guardian. Provides that a social media company shall verify the age of an account holder using a third-party vendor to perform reasonable age verification before allowing access to the social media company's social media platform. Provides that a social media company shall not permit an Illinois user who is a minor to access the social media platform between the hours of 10 p.m. through 6 a.m. Sets forth provisions concerning liability for social media companies and liability for commercial entities or third-party vendors.