Policy Brief: Illinois Senate Bill 3517 (The Privacy Rights Act) 

Introduction: 

Illinois Senate Bill 3517, also known as the “Privacy Rights Act,” proposes a framework to strengthen consumer privacy protections in the state. This bill, if passed, would significantly impact businesses that collect personal information from Illinois residents. This bill was introduced by Deputy Minority Leader, Sue Rezin of the 38th Senate District. The bill’s co-sponsor includes Senator Sally J. Turner of 44th District. 

Key Provisions:  

Requires covered businesses to: 

  • Implement reasonable safeguards to protect personal information. 

  • Provide consumers with clear and conspicuous notices about data collection practices, including the purpose, use, and potential disclosure of their information. 

  • Honor consumer requests to access, correct, delete or opt-out of the sale or sharing of their personal information without any penalty for utilizing the service/application. 

  • Limit the use of sensitive personal information for specific purposes and with additional consumer consent. 

  • Covered entities must offer clear and accessible mechanisms for consumers to protect and opt-out of their data collection and usage. 

  • Covered entities must be transparent about data practices and provide clear choices to the consumers. 

Establishes a Privacy Protection Agency to enforce the Act, including the creation of rules, conducting investigations, and imposing penalties for violations. 

Creates the Consumer Privacy Fund to support the Privacy Protection Agency’s operations. 

Potential Impacts

  • Increased Consumer Control: Consumers will have greater control over their personal information, including the ability to access, correct, and delete data. 

  • Enhanced Business Accountability: Businesses will need to implement robust data security practices and obtain informed consent for data collection and use. 

  • Potential for Regulatory Burden: Businesses may face compliance costs associated with implementing the Act’s requirements.  

  • Uncertain Impact on Innovation: The Act’s impact on data-driven innovation within the state’s business community remains to be seen.  

Current Status:

Introduced in 103 Illinois General Assembly in February and remains in the Assignments Committee. 

FYI, here’s the Illinois General Assembly Bill Text:

https://ilga.gov/legislation/BillStatus.asp?DocNum=3517&GAID=17&DocTypeID=SB&LegID=&SessionID=112&SpecSess=&Session=&GA=103 


Previous
Previous

Why You Should Call Your Elected Officials! 

Next
Next

Massachusetts Senate Bill S2770 (The Massachusetts Data Privacy Act)