CONSUMER DATA PRIVACY

Illinois Senate Bill 3220, titled the Illinois Consumer Data Privacy Act, aims to give consumers more control over their personal data. It grants rights such as confirming if their data is being processed, correcting inaccuracies, deleting their data, obtaining a copy of their data, and opting out of targeted advertising, data sales, or profiling. The bill applies to businesses operating in Illinois that handle personal data of at least 100,000 consumers or 25,000 consumers if they derive over 50% of their revenue from selling personal data. It also establishes requirements for data controllers and processors, exempts certain entities, and designates the Attorney General as the enforcer of these rights. Additionally, it creates the Consumer Privacy Fund and amends the Freedom of Information Act to protect data protection impact assessments from disclosure.

Positive media analysis is being generated.

Although direct media reactions to SB3220 are not found, similar data privacy bills have faced criticism for potentially imposing compliance burdens on businesses, especially smaller ones. Concerns often include the complexity and cost of adhering to new regulations, the potential for stifling innovation, and the risk of unintended consequences that could arise from broad definitions and requirements.