Technology (Data Privacy)

Creates the Commission on Artificial Intelligence and Workforce Transition Act. Establishes the Commission on Artificial Intelligence and Workforce Transition. Provides that the Commission shall direct specified State agencies to conduct assessments of the actual and projected impact of generative artificial intelligence systems and frontier artificial intelligence systems on Illinois industries, occupations, regions, and workers. Provides that the Commission shall identify, review, and make recommendations regarding State and federal workforce development, education, apprenticeship, unemployment insurance, and income support programs with consideration of the assessments. Requires specified State agencies to designate a senior staff liaison to the Commission and to conduct assessments, analyses, and data collection activities directed by the Commission. Provides that the Commission shall prepare and file an initial comprehensive report and biennial update reports concerning findings and recommendations. Sets forth provisions concerning membership; administrative support; meetings; and confidentiality. Repeals the Act on January 1, 2034. Effective immediately.

Creates the Algorithmic Pricing Transparency Act. Provides that any person or entity that sells or offers to sell goods or services through an online platform to consumers in the State shall provide a clear and conspicuous disclosure if the baseline price for a specific consumer is personalized and generated using surveillance pricing. Provides that a consumer may opt out of surveillance pricing and a covered entity shall provide the consumer with a non-personalized baseline price for the goods or services. Prohibits a covered entity from using specified personal information to generate algorithmic pricing. Provides that price changes that are the result of specified allowable conduct are not prohibited under the Act. Exempts insurers and providers of financial services from the requirements of the Act. Provides that a violation of the Act is an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Preempts home rule. Amends the Consumer Fraud and Deceptive Business Practices Act to make a conforming change. Restricts private rights of action to enforce the Algorithmic Pricing Transparency Act. Effective January 1, 2028.

Amends the Judicial Privacy Act to expand coverage to federal judicial officials and State judicial officials that includes judges and clerks of the State and federal judicial system. Amends "personal information" that may be protected to include financial, date of birth, race and ethnicity, and biometric information. Provides the method of making a written request to protect personal information by a federal and State judicial official. Creates form for the written request. Allows a court file or document to be sealed. Makes other changes.

Creates the Illinois Consumer Data Privacy Act. Establishes certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer's personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer. Defines terms. Applies to persons who conduct business in Illinois or produce products or services that are targeted to Illinois residents and that during a calendar year control or process personal data of at least 100,000 consumers or 25,0000 consumers and derive over 50% of gross revenue from the sale of personal data. Creates requirements for persons or entities that control and process consumer data. Exempts certain persons or entities from the provisions of the Act. Provides that the Attorney General has exclusive authority to enforce the consumer data privacy rights. Creates the Consumer Privacy Fund to be administered by the Office of the Attorney General. Amends the Freedom of Information Act. Exempts from disclosure data protection impact assessments created under the Illinois Consumer Data Privacy Act. Makes a conforming change in the State Finance Act.

Creates the Data Broker Registration and Accessible Deletion Mechanism Act. Provides that, annually, on or before January 31, a data broker operating in the State shall register with the Attorney General. Provides that, in registering with the Attorney General, a data broker shall pay a registration fee in an amount determined by the Attorney General and shall also provide specified information. Provides that the Attorney General shall create a page on its website where the registration information shall be made accessible to the public. Provides for civil penalties. Provides that all moneys received by the Attorney General under the provisions shall be deposited into the Data Broker Registry Fund. Provides that, no later than January 1, 2028, the Attorney General shall establish an accessible deletion mechanism that allows a consumer, through a single verifiable consumer request, to request that every data broker that maintains any personal information delete any personal information related to that consumer held by the data broker. Amends the State Finance Act and the Consumer Fraud and Deceptive Business Practices Act to make conforming changes.

Creates the Automated License Plate Recognition System Act. Sets forth provisions regarding authorized uses of an automated license plate recognition system, data retention, prohibited uses of an automated license plate recognition system, restrictions, requirements for use, preservation and disclosure, required data collection, reporting requirements, admissibility, privacy, penalties, and a private right of action. Makes a conforming change in the Freedom of Information Act. Effective immediately.

HB 5276 amends Illinois' Public Official Safety and Privacy Act (5 ILCS 347/10) by adding law enforcement officers to the legal definition of "public official." This change directly extends privacy protections to law enforcement officers, requiring governmental agencies to remove their personal information - including home addresses, phone numbers, and email - from publicly available records upon written request. The bill updates Section 10 of the Act to include law enforcement officers under the same privacy safeguards already provided to legislators, constitutional officers, and other public officials. This policy change ensures officers can request the removal of their personal data from public databases maintained by government agencies.

Creates the Social Media Data Clean Slate Act. A social media platform shall provide a clear and conspicuous button that enables a user to delete the user's account that satisfies specified requirements. Provides that the social media platform shall, when the button is clicked, provide a user with the steps necessary to complete an account deletion request, which shall include deletion of the user's personal information. Sets forth additional provisions concerning the account and personal information deletion process. Provides that any waiver of the rights provided under the Act shall be void and unenforceable. Provides that the Attorney General shall adopt rules necessary to implement and enforce the Act. Effective January 1, 2027.

Creates the Consumer Data Privacy Act. Establishes certain consumer rights relating to personal data, including the rights to confirm whether data is being processed, to correct any inaccuracies in the consumer's personal data, to delete personal data provided by the consumer, to obtain a copy of the consumer's personal data that was previously provided, and to opt out of targeted advertising, the sale of data, or profiling of the consumer. Defines terms. Applies to persons who conduct business in Illinois or produce products or services that are targeted to Illinois residents and that during the a calendar year control or process person data of at least 100,000 consumers or 25,0000 consumers and derives over 50% of gross revenue from the sale of personal data. Makes requirements for persons or entities that control and process consumer data and also exempts certain persons or entities from the statutory provisions of the Act. Provides that the Attorney General has exclusive authority to enforce the consumer data privacy rights. Creates the Consumer Privacy Fund to be administered by the Office of the Attorney General. Amends the Freedom of Information Act. Exempts from disclosure data protection impact assessments done under the Illinois Consumer Data Privacy Act. Makes a conforming change in the State Finance Act.

Creates the Illinois Data Privacy Protection Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. Requires a controller, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Authorizes the Attorney General to enforce the Act. Amends the Personal Information Protection Act. Provides that, annually, on or before January 31, a data broker operating in the State must register with the Attorney General. Provides that the Attorney General shall create a page on its Internet website in which the registration information is accessible to the public that allows consumers to delete their personal information across all registered data brokers. Provides for civil penalties. Amends the State Finance Act to create the Data Privacy Protection Fund. Makes definitions. Makes other changes. Limits the concurrent exercise of home rule powers. Contains a severability provision.