Amends the Genetic Information Privacy Act. Provides that the use of genetic testing, biomarker testing, or both (rather than only genetic testing), and the information derived from testing is confidential and privileged and may be released only to the individual tested and persons specifically authorized in writing by the individual tested to receive the information. Provides that an insurer may not seek information derived from genetic or biomarker testing (rather than only genetic testing) for use in connection with a policy of accident or health insurance (unless the individual voluntarily submits the results and the results are favorable to the individual), for nontherapeutic purposes, or for underwriting purposes. In provisions concerning the use of testing information by employers, provides that an employer may release genetic testing or biomarker testing information (rather than only genetic testing information) under specified circumstances. Limits an employer's use of genetic information, genetic testing, biomarkers, and biomarker testing (rather than only genetic information and genetic testing). In provisions concerning testing, provides that no person may disclose or be compelled to disclose the identity of any person upon whom a genetic test or biomarker test (rather than only genetic test) is performed or the results of a genetic test or biomarker test (rather than only genetic test) in a manner that permits identification of the subject of the test, except to the persons specified in the Act. Limits the concurrent exercise of home rule powers. Defines "biomarker" and "biomarker testing". Makes other and conforming changes.
Creates the Algorithmic Pricing Transparency Act. Provides that any person or entity that sells or offers to sell goods or services through an online platform to consumers in this State shall provide a clear and conspicuous disclosure if the price displayed to a consumer is generated using surveillance pricing. Provides that a consumer may opt out of surveillance pricing and a covered entity shall provide the consumer with a non-personalized baseline price for the goods or services. Prohibits a covered entity from using specified personal information to generate algorithmic pricing. Provides that a violation of the Act is an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Effective one year after becoming law.
Amends the Illinois Credit Union Act. Provides that the business office for a credit union's registered agent may, but is not required to, be (instead of shall be) the same as the principal place of business of the credit union. In provisions concerning meetings of directors, sets forth provisions concerning the preparation and approval of meeting minutes. Adds provisions concerning disclosure and due diligence requirements for credit unions when providing digital asset services or contracting with a covered person or digital asset service provider and provisions concerning sales of debt cancellation services and products by a credit union to its members. In provisions concerning the investment of funds not used in loans, provides that the funds may be invested in commercial mortgage related securities and collateralized mortgage obligations to aid in the credit union's management of its assets, liabilities, and liquidity. Effective immediately.
Creates the Civil Liability for Unsolicited Intimate Images Act. Provides that any person 18 years of age or older who knowingly and intentionally transmits obscene material by computer or other electronic means to the computer or electronic communication device of another person 18 years of age or older commits a trespass and is liable to the recipient of the obscene material for actual damages or $500, whichever is greater, in addition to reasonable attorney's fees and costs, if the person who receives the obscene material has not consented to the receipt of the obscene material or has expressly forbidden the receipt of the obscene material and if a reasonable person who receives the obscene material would suffer emotional distress as a result of the receipt of the obscene material. Authorizes the court to enjoin and restrain the defendant from committing such further acts. Provides that "obscene material" means material, including, but not limited to, images depicting a person engaging in an act of sexual intercourse, sodomy, oral copulation, sexual penetration, or masturbation, or depicting the exposed genitals or anus of any person, taken as a whole, that to the average person, applying contemporary statewide standards, appeals to the prurient interest, that, taken as a whole, depicts or describes sexual conduct in a patently offensive way, and that, taken as a whole, lacks serious literary, artistic, political, or scientific value. Provides that the Act does not apply to (i) any Internet service provider, mobile data provider, or operator of an online or mobile application, to the extent that such entity is transmitting, routing, or providing connections for electronic communications initiated by or at the direction of another, (ii) any service that transmits material, including an on-demand, subscription, or advertising-supported service, (iii) a health care provider that transmits material for a legitimate medical purpose, or (iv) any transmission of commercial email. Provides that venue for an action under the Act may lie in the jurisdiction where the obscene material is transmitted from or where the obscene material is received or possessed by the plaintiff.
Creates the Identity Verification for Consumer Services Act. Requires an entity that provides specified services to use identity verification to verify a person's identity before initiating or modifying an agreement to provide the service. Provides that an entity that provides a specified service that becomes aware of an attempted or confirmed identity theft through its compliance with the Act shall report the attempted or confirmed identity theft to the Attorney General. Provides that a violation of the Act constitutes an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Limits home rule. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Effective January 1, 2027.
Amends the Right to Privacy in the Workplace Act. Provides that an employer enrolled in an Employment Eligibility Verification System, including the E-Verify program, shall not impose work authorization verification or re-verification requirements greater than those required by the Employment Eligibility Verification System. Provides that, if an employer receives notification from any federal agency or other outside third party not responsible for the enforcement of immigration law of a discrepancy as it relates to an employee's individual taxpayer identification number or other identifying documents, guarantees specified rights and protections to the employee. Makes changes in provisions concerning the administration and enforcement of the Act by the Department of Labor. Sets forth provisions concerning action for civil penalties brought by an interested party; private right of action; penalties; and review under the Administrative Review Law.
Creates the Digital Assets and Consumer Protection Act. Provides that the Department of Financial and Professional Regulation shall regulate digital asset business activity in the State. Sets forth provisions concerning: applicability; the powers and duties of the Department; funds; customer protections; custody and protection of customer assets; covered exchanges; compliance; registration; supervision; records; additional procedural provisions; confidentiality; violations; enforcement; rulemaking authority; and severability. Creates the Special Purpose Trust Company Article in the Corporate Fiduciary Act. Sets forth provisions concerning certificates of authority; rulemaking and organization; certificates of authority for foreign corporate fiduciaries; eligibility; fees; and certificates of reciprocity. Makes other changes to various Acts. Effective immediately.
Creates the Virtual Currency Kiosk Consumer Protection Act. Provides that specified information reported to the Department of Financial and Professional Regulation by virtual currency kiosk shall be confidential, except as otherwise provided in the Act. Establishes warning and general terms and conditions disclosure requirements for a virtual currency kiosk operator opening an account for a new customer and prior to entering into an initial transaction for, on behalf of, or with the customer. Requires a receipt to be provided to each customer following a transaction. Requires all virtual currency kiosk operators to have live customer service, as specified; create anti-fraud, enhanced due diligence, and federal and State law compliance policies; designate a compliance officer and a consumer protection officer; and use blockchain analytics software to assist in the prevention of sending purchased virtual currency from a virtual currency kiosk operator to a digital wallet known to be affiliated with fraudulent activity at the time of a transaction; and report the location of each virtual currency kiosk located within this State within 45 days after the end of the calendar quarter. Requires a virtual currency kiosk operator to receive a money transmitter license. Sets forth supervision duties for the Department and the Secretary of Financial and Professional Regulation.
Amends the Illinois Century Network Act. Provides that the connection of anchor institutions to the Illinois Century Network shall be prioritized according to the type of anchor institution, starting with schools and libraries.
Creates the Behavioral Health Workforce Data Collection Act. Requires The Department of Financial and Professional Regulation to collect data, as specified, from behavioral health professionals at the time of initial application for licensure and renewal of an active license. Requires the Department to ensure the data collection process is secure and adheres to State and federal privacy laws, including de-identification of personal data. Provides that the Department shall make the collected data publicly available in an aggregated, de-identified format. Requires the data to be published in a format that allows policy groups, advocates, and other stakeholders to monitor the diversity, linguistic capacity, and availability of the behavioral health workforce; identify regions and specialties with severe shortages; and forecast future workforce needs. Requires the Department to publish the aggregated data annually by January 31 on its website and through other accessible formats. Grants the Department rulemaking authority to implement the Act. Requires the Department to comply with applicable data privacy and confidentiality laws. Provides that, for a period of 2 years following the effective date of the Act, the Department shall submit to the Illinois Behavioral Health Workforce Center a list of email addresses or email communications, subject to data privacy and confidentiality laws, of all licensed behavioral health professionals exclusively for purposes of collecting data related to the behavioral health workforce in Illinois. Effective immediately.
