Technology (Consumer Data Protection)

in committee · Illinois · Senate May 22, 2026

SB 3603: CONSUMERS–DATA PROCESSING

Amends the Consumer Fraud and Deceptive Business Practices Act. Provides that a consumer may opt out of the processing of personal data for the purpose of targeted advertising by submitting a request using the methods specified in a data processing controller's privacy notice. Sets forth the requirements of a controller's privacy notice. Provides that, if a controller processes personal data for purposes of targeted advertising or sells personal data to third parties for targeted advertising, the controller shall disclose the processing or sale in a privacy notice and provide access to a clear and conspicuous method outside the privacy notice for a consumer to opt out of the processing or sale. Makes other changes. Effective January 1, 2028.

Topics ✓ TechnologySupports TechnologyBill mandates consumer opt-out for targeted ads, requires clear privacy notices, and strengthens data privacy protections under consumer fraud law.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

in committee · Illinois · Senate May 22, 2026

SB 3219: PERSONAL INFO-BROKER REGISTRY

Amends the Personal Information Protection Act. Provides that, annually, on or before January 31, a data broker operating in the State shall register with the Attorney General. Provides that, in registering with the Attorney General, a data broker shall pay a registration fee in an amount determined by the Attorney General and shall also provide specified information. Provides that the Attorney General shall create a page on its Internet website where the registration information shall be made accessible to the public. Provides for civil penalties. Provides that all moneys received by the Attorney General under the provisions shall be deposited into the Data Broker Registry Fund to offset all reasonable costs of enforcing the registration requirements and establishing and maintaining the Internet website. Amends the State Finance Act to create the Data Broker Registry Fund.

Topics ✓ TechnologySupports TechnologyMandates data broker registration with Attorney General for transparency and privacy protection under Personal Information Protection Act, aligning with data privacy safeguards.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · Illinois · House Mar 27, 2026

HB 4985: SURVEILLANCE-BASED PRICING

Creates the Surveillance-Based Price Discrimination Act. Provides that a person shall not use surveillance data as part of an automated decision system to inform the individualized price assessed to a consumer for goods or services. Sets forth exemptions to the provision. Provides that the Attorney General shall enforce the Act. Sets forth provisions concerning private rights of action and penalties for violations.

Topics ✓ TechnologySupports TechnologyProhibits using surveillance data for price discrimination, protecting consumer privacy by restricting data misuse in pricing algorithms.95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Data Privacy

Track

in committee · Illinois · House Feb 13, 2026

HB 5530: FAIR ONLINE PRICING ACT

Creates the Fair Online Pricing Act. Provides that a price offered to a consumer through the consumer's online device shall not be generated in whole, or in part, based on the following input data: (1) the hardware or hardware state of the online device; (2) the presence or absence of any software on the online device; and (3) geolocation data of the online device. Sets forth exemptions. Provides that a violation of the provisions of the Act is an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make conforming changes.

Topics ✓ TechnologySupports TechnologyProhibits using device hardware, software, or geolocation data for pricing, protecting consumer privacy and preventing discriminatory pricing practices.90% confidence

Sub-Topics Consumer Data Protection Tags Consumer Protection

Track

in committee · Illinois · Senate May 22, 2026

SB 3180: AI DATA PRIVACY ACT

Creates the Artificial Intelligence Data Privacy Act. Prohibits a deployer from training an artificial intelligence on a user's data and retaining the training data indefinitely unless specified conditions are satisfied. Sets forth provisions concerning a private right of action. Provides that a violation of the Act constitutes an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Effective January 1, 2027.

Topics ✓ TechnologySupports TechnologyProhibits AI training on user data without conditions, establishes private right of action, and ties violations to consumer privacy protections under Consumer Fraud Act.95% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Data Privacy

Track

in committee · Illinois · House Mar 27, 2026

HB 5221: CONSUMER DATA PRIVACY ACT

Creates the Consumer Data Privacy Act. Sets forth provisions concerning agreements between personal data processors and controllers. Provides for consumer personal data rights, including the right to opt out of the processing of personal data concerning the consumer for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of automated decisions that produce legal effects. Sets forth provisions concerning the responsibilities of controllers; requirements for small businesses; and data privacy and protection assessments. Provides for civil penalties. Preempts home rule. Amends the Freedom of Information Act to make a conforming change. Effective January 1, 2027.

Topics ✓ TechnologySupports TechnologyBill establishes consumer data privacy rights including opt-out of targeted ads, data sale, and profiling. Explicitly protects digital privacy rights per technology policy indicators.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Privacy

Track

in committee · Illinois · House Apr 9, 2026

HB 5521: BIOMETRIC SURVEILLANCE ACT

Creates the Illinois Biometric Surveillance Act. Provides that law enforcement agencies may not obtain, retain, possess, access, request, use, or enter into an agreement with a third party, State or local government agency, or federal agency to obtain, retain, possess, access request, or use a biometric identification system. Provides a private right of action and for enforcement by the Attorney General. Amends the Illinois Identification Card Act and the Illinois Vehicle Code to provide that the Secretary of State may not provide facial recognition search services except for verification of an individual's identity when issuing a mobile driver's license or identification card.

Topics ✓ Criminal JusticeSupports Criminal JusticeRestricts law enforcement biometric surveillance, protecting civil rights and enhancing oversight in criminal justice practices95% confidence ✗ ImmigrationOpposes ImmigrationRestricts law enforcement biometric use, limiting state cooperation with federal immigration enforcement. Directly opposes expanded enforcement mechanisms.85% confidence ✓ TechnologySupports TechnologyRestricts law enforcement biometric surveillance, enhancing data privacy protections under Illinois law by prohibiting unauthorized access to biometric systems.95% confidence

Sub-Topics Law Enforcement Consumer Data Protection Emerging Technology

Track

in committee · Illinois · Senate Feb 6, 2026

SB 3856: BIPA-SECURITY PURPOSE

Amends the Biometric Information Privacy Act. Defines "security purpose" to mean for the purpose of preventing or investigating retail theft, fraud, or any other misappropriation or theft of a thing of value. Provides that security purpose includes protecting property from trespass, controlling access to property, or protecting any person from harm, including stalking, violence, or harassment, and includes assisting a law enforcement investigation. Waives certain requirements for collecting, capturing, or otherwise obtaining a person's or a customer's biometric identifier or biometric information under certain circumstances relating to security purposes. Effective immediately.

Topics ✗ TechnologyOpposes TechnologyAmends BIPA to waive privacy requirements for biometric data collection under broad 'security purpose' definitions, weakening data privacy protections.95% confidence

Sub-Topics Consumer Data Protection

Track

in committee · Illinois · Senate May 22, 2026

SB 3262: COMPANION AI PROTECTION ACT

Creates the Companion Artificial Intelligence Protection Act. Provides that an operator of a companion artificial intelligence product shall not deploy or operate a companion artificial intelligence product that incorporates specified features. Provides for auditing and reporting requirements. Provides that an operator shall provide a clear notification during an interaction with a companion artificial intelligence product informing the user that the user is communicating with a companion artificial intelligence product. Requires the implementation of mandatory user safeguards, including a crisis intervention protocol. Sets forth provisions concerning liability and enforcement. Effective January 1, 2027.

Topics ✓ TechnologySupports TechnologyRestricts AI features requiring user notification and audits, enhancing transparency and consumer protection in AI interactions per bill's requirements.85% confidence

Sub-Topics Artificial Intelligence Consumer Data Protection Social Media

Track

died · Illinois · House Mar 27, 2026

HB 5179: PRIVACY-NEURAL DATA-DEVICES

Creates the Protection of Neural Data Act. Requires any nonmedical person or organization using or facilitating neural devices to access individuals' neural data to publicly post all user agreements and privacy terms on their website and clearly disclose to individuals the health and safety risks associated with the device. Prohibits a covered entity from storing, retaining, or transferring an individual's neural data unless the individual consents. Requires that covered entities must delete all neural data in their possession and instruct all third party recipients to do the same within 30 days of an individual's retracting of consent. Authorizes the Attorney General and State's Attorneys to enforce the Act. Makes violation of this Act a Class 1 misdemeanor Creates a civil cause of action for violation and a presumption of at least $10,000 in damages for unauthorized transfer of neural data.

Topics ✓ TechnologySupports TechnologyRequires transparency, consent, and deletion for neural data, directly protecting user privacy in technology as per data privacy indicators.95% confidence

Sub-Topics Consumer Data Protection

Track