Amends the Criminal Code of 2012. Provides that it is unlawful for any person to, without the consent of another person, operate an unmanned aerial vehicle in a manner that: (1) is intended to cause the unmanned aerial vehicle to enter the space above or surrounding the other person's occupied residence for the purpose of making a video record or transmitting live video or audio recordings of the other person while the other person is: (A) within his or her occupied residence; or (B) on the land or premises on which his or her occupied residence is located; and (2) invades the other person's reasonable expectation of privacy. Provides that it is unlawful for the person to knowingly disseminate a video record or live video made in violation of these provisions. Defines "unmanned aerial vehicle". Provides that a violation is a Class A misdemeanor.
Amends the Biometric Information Privacy Act. Defines "security purpose" to mean for the purpose of preventing or investigating retail theft, fraud, or any other misappropriation or theft of a thing of value. Provides that security purpose includes protecting property from trespass, controlling access to property, or protecting any person from harm, including stalking, violence, or harassment, and includes assisting a law enforcement investigation. Waives certain requirements for collecting, capturing, or otherwise obtaining a person's or a customer's biometric identifier or biometric information under certain circumstances relating to security purposes. Effective immediately.
Amends the Illinois Identification Card Act. Changes references from "electronic credential" to "mobile identification card". Provides that no relying party, including law enforcement, may take physical possession of a mobile identification card holder's mobile device for purposes of verifying the mobile identification card holder's identity. Amends the Illinois Vehicle Code. Inserts conforming provisions concerning requirements for mobile driver's licenses. Makes other changes.
Creates the Social Media Age Restriction Act. Provides that an operator of a social media platform shall take reasonable steps, including the implementation of an age assurance system, to prevent a child from creating or maintaining an account on the social media platform. Provides that an operator may enter into an agreement with application distribution services or device manufacturers to allow for user information to be shared for age assurance purposes. Provides that the provision does not apply to a parent or guardian who allows a child to use an account held by the parent or guardian. Sets forth provisions concerning a 30-day cure period and civil penalties. Provides that an operator shall have 180 days after the effective date of the Act to comply with the requirements of the Act. Effective immediately.
Creates the Government Communications Transparency and Security Act. Prohibits a government entity, government officer, or government employee from downloading, installing, accessing, activating, or using an end-to-end encryption platform with autodeletion on a government communication device. Prohibits an Internet service provider, telecommunications carrier, server operator, mobile application marketplace, or digital platform doing business in the State from enabling the download, installation, activation, or operation of an end-to-end encryption platform with autodeletion on a government communication device. Requires Internet service providers, telecommunications carriers, and digital platforms to implement reasonable technological measures to block access to, installation of, or operation of end-to-end encryption platforms with autodeletion on government communication devices. Establishes penalties for violations. Authorizes the Attorney General or an Illinois taxpayer to bring suit to enforce the Act, with recovery of attorney's fees and costs. Requires the Department of Innovation and Technology to adopt rules. Defines terms. Effective January 1, 2027.
Creates the Children's Social Media Safety Act. Provides that, no later than January 1, 2028, an operating system provider shall: (1) provide an accessible interface at account setup that requires an account holder to indicate the birth date, age, or both; (2) provide an operator who has requested a signal with respect to a particular user a signal that identifies the user's age by category; and (3) send only the minimum amount of information necessary to comply with the provision. Provides that an operator shall not offer a platform in the State without conducting age verification as required under the Act to determine whether a user is a minor. Provides that, for all users that the operator has actual knowledge to be a minor, the operator shall use specified default settings for the minor. Provides that a violation of the Act constitutes an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Effective January 1, 2027.
Amends the Nurse Practice Act. In provisions concerning registered professional nurses, adds provisions concerning: the use of artificial intelligence in recorded or transcribed encounters; prohibition on substituting artificial intelligence for nursing services; use of artificial intelligence as clinical decision support under the control of a registered professional nurse; patient notice and transparency; confidentiality protections; exceptions for nonclinical activity; and defined terms. Amends the grounds for discipline to add violations of the artificial intelligence provisions by a registered professional nurse. Requires a health care entity that employs registered professional nurses and deploys artificial intelligence in direct patient care to maintain validation and bias monitoring records for each system and make such records available to the Department of Financial and Professional Regulation upon request; provide registered professional nurses with training on intended use, data limits, and known failure modes; ensure registered professional nurses have access to data inputs and key factors that produced any recommendation used in direct patient care; and prohibit staffing, triage, admission, discharge, or transfer decisions that rely solely on artificial intelligence. Allows the Department to investigate any health care entity that employs registered professional nurses for a violation of the artificial intelligence provisions. Effective immediately.
Amends the School Code. Requires, on or before the 2027-2028 school year, each school board to adopt and implement a wireless communication device policy that limits the use of wireless communication devices by students during instructional time to the greatest extent possible. Provides that the wireless communication device policy shall be developed in consultation with the parent-teacher advisory committee. Establishes exceptions for wireless communication device use during instructional time. Requires each school board to review its wireless communication device policy in consultation with the parent-teacher advisory committee at least once every 3 years and make any necessary and appropriate revisions to the policy. Provides that a school district shall publicly post the policy on its website. Provides that, if the school district does not operate a website, then the school district shall provide a copy of the policy to the parents or guardians of every student enrolled in the school district. Effective immediately.
Creates the Companion Artificial Intelligence Protection Act. Provides that an operator of a companion artificial intelligence product shall not deploy or operate a companion artificial intelligence product that incorporates specified features. Provides for auditing and reporting requirements. Provides that an operator shall provide a clear notification during an interaction with a companion artificial intelligence product informing the user that the user is communicating with a companion artificial intelligence product. Requires the implementation of mandatory user safeguards, including a crisis intervention protocol. Sets forth provisions concerning liability and enforcement. Effective January 1, 2027.
Creates the Protection of Neural Data Act. Requires any nonmedical person or organization using or facilitating neural devices to access individuals' neural data to publicly post all user agreements and privacy terms on their website and clearly disclose to individuals the health and safety risks associated with the device. Prohibits a covered entity from storing, retaining, or transferring an individual's neural data unless the individual consents. Requires that covered entities must delete all neural data in their possession and instruct all third party recipients to do the same within 30 days of an individual's retracting of consent. Authorizes the Attorney General and State's Attorneys to enforce the Act. Makes violation of this Act a Class 1 misdemeanor Creates a civil cause of action for violation and a presumption of at least $10,000 in damages for unauthorized transfer of neural data.
