HB3041 - 104th General Assembly (2025-2026)
DATA PRIVACY AND PROTECTION
Last Action
3/21/2025 - House: Rule 19(a) / Re-referred to Rules Committee
Statutes Amended In Order of Appearance
Synopsis As Introduced
Creates the Illinois Data Privacy and Protection Act. Provides that a covered entity (any entity or any person, other than an individual acting in a non-commercial context, that alone or jointly with others determines the purposes and means of collecting, processing, or transferring covered data) may not collect, process, or transfer covered data unless the collection, processing, or transfer is limited to what is reasonably necessary and proportionate. Provides that a covered entity and a service provider shall establish, implement, and maintain reasonable policies, practices, and procedures concerning the collection, processing, and transferring of covered data. Contains provisions concerning retaliation; transparency; individual data rights; consent; data protection for children and minors; civil rights; data security; small business protections; executive responsibility; service providers and third parties; enforcement; severability; and rulemaking. Effective 180 days after becoming law.
Actions
| Date | Chamber | Action |
|---|---|---|
| 2/06/2025 | House | Filed with the Clerk by Rep. Abdelnasser Rashid |
| 2/06/2025 | House | First Reading |
| 2/06/2025 | House | Referred to Rules Committee |
| 3/04/2025 | House | Assigned to Cybersecurity, Data Analytics, & IT Committee |
| 3/21/2025 | House | Rule 19(a) / Re-referred to Rules Committee |