Technology

Amends the Personalized Algorithmic Pricing Disclosure Act. Provides that any entity that sets the price of goods or services using personalized algorithmic pricing, and that directly or indirectly advertises, promotes, labels, or publishes a statement, display, image, offer, or announcement of personalized algorithmic pricing to a consumer, using personal data specific to the consumer, shall include a specified disclosure. Sets forth exceptions to the provision. Provides that a violation of the Act constitutes an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Effective immediately.

Creates the Residential Automated Solar Permitting Platform Act. On or before July 1, 2027, municipalities and counties with a population of more than 10,000 residents must adopt a residential automated solar permitting platform. Requires that the municipality or county anticipate that the residential automated solar permitting platform will have the capability to process at least 75% of residential solar applications on existing construction submitted to authorities having jurisdiction in the State. "Residential automated solar permitting platform" means software or a combination of software that automates plan review, automatically produces code-compliant approvals, accepts online payments for permitting fees if permitting fees are levied, and instantly issues permits and permit revisions for residential photovoltaic systems upon online submission of permitting fee payments, if permitting fees are levied, and a code-compliant application. Provides that a person or entity whose rights have been violated under this Act by a municipality or county is entitled to collect: (1) in the case of unlawful retaliation, all legal or equitable relief as may be appropriate; and (2) attorney's fees and costs. Makes other changes.

Creates the Artificial Intelligence Public Safety and Child Protection Transparency Act. Provides that a frontier artificial intelligence model developer or large chatbot provider shall write, implement, comply with, and clearly and conspicuously publish on its website a public safety and child protection plan. Provides that the Attorney General shall establish a mechanism to be used by a large frontier developer, a large chatbot provider, or a member of the public to report a safety incident related to specified artificial intelligence models or chatbots. Sets forth provisions concerning the protection of whistleblowers; third party audits of large frontier developers; and civil penalties. Provides for rulemaking by the Attorney General. Effective January 1, 2027.

Creates the Artificial Intelligence Data Privacy Act. Prohibits a deployer from training an artificial intelligence on a user's data and retaining the training data indefinitely unless specified conditions are satisfied. Sets forth provisions concerning a private right of action. Provides that a violation of the Act constitutes an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Effective January 1, 2027.

Creates the Social Media Age Restriction Act. Provides that an operator of a social media platform shall take reasonable steps, including the implementation of an age assurance system, to prevent a child from creating or maintaining an account on the social media platform. Provides that an operator may enter into an agreement with application distribution services or device manufacturers to allow for user information to be shared for age assurance purposes. Provides that the provision does not apply to a parent or guardian who allows a child to use an account held by the parent or guardian. Sets forth provisions concerning a 30-day cure period and civil penalties. Provides that an operator shall have 180 days after the effective date of the Act to comply with the requirements of the Act. Effective immediately.

Amends the Consumer Fraud and Deceptive Business Practices Act. Provides that the owner, licensee, or operator of a generative artificial intelligence system shall conspicuously display a warning on the system's user interface notifying users of the limitations of generative artificial intelligence systems. Provides that each day the required warning is not displayed by the owner, licensee, or operator of a generative artificial intelligence system constitutes a separate violation of the Act. Provides that a violation of the provision constitutes an unlawful practice within the meaning of the Act.

Amends the Illinois Human Rights Act. Makes it a civil rights violation under the Act to use artificial intelligence in a real estate transaction without providing notice to the other person engaging in the real estate transaction that the owner, real estate broker or salesman, or agent of one of them is using artificial intelligence to conduct the real estate transaction. Makes it a civil rights violation to fail to inform an applicant for a loan or credit card if the financial institution used artificial intelligence to process the application. Makes it a civil rights violation to fail to inform a person seeking a place of public accommodation that the place of public accommodation uses artificial intelligence to determine whether the person seeking a place of public accommodation is permitted to enjoy the full and equal enjoyment of its facilities, goods, and services. Requires that the Department of Human Rights adopt any rules necessary for the implementation and enforcement of the Act.

Creates the Artificial Intelligence Product Liability Act. Sets forth provisions concerning product liability actions brought against a developer of an artificial intelligence system for defective design, failure to contain adequate instructions or warnings, and failure to conform to an express warranty. Provides that a deployer of an artificial intelligence system shall be deemed to be liable as a developer for harm caused by a product if: (1) the deployer makes material and substantial change to the product or (2) the deployer intentionally misuses the product contrary to the express warranty and that use was the proximate cause of harm to the plaintiff. Sets forth provisions concerning applicability and enforcement.

Creates the Consumer Data Privacy Act. Sets forth provisions concerning agreements between personal data processors and controllers. Provides for consumer personal data rights, including the right to opt out of the processing of personal data concerning the consumer for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of automated decisions that produce legal effects. Sets forth provisions concerning the responsibilities of controllers; requirements for small businesses; and data privacy and protection assessments. Provides for civil penalties. Preempts home rule. Amends the Freedom of Information Act to make a conforming change. Effective January 1, 2027.

Creates the Illinois Biometric Surveillance Act. Provides that law enforcement agencies may not obtain, retain, possess, access, request, use, or enter into an agreement with a third party, State or local government agency, or federal agency to obtain, retain, possess, access request, or use a biometric identification system. Provides a private right of action and for enforcement by the Attorney General. Amends the Illinois Identification Card Act and the Illinois Vehicle Code to provide that the Secretary of State may not provide facial recognition search services except for verification of an individual's identity when issuing a mobile driver's license or identification card.