HB3041

Illinois Data Privacy and Protection Act establishes data privacy and protection standards.

The Illinois Data Privacy and Protection Act establishes data privacy and protection standards. It defines "covered data" and "covered entity." A covered entity must obtain affirmative express consent for data collection, processing, or transfer. It prohibits discrimination based on covered data and requires data security practices. The Act outlines individual rights, including access, correction, and deletion of data. It also mandates transparency, prohibiting retaliation against individuals exercising their rights, and sets enforcement mechanisms.