Illinois Senate Bill 3080

---

Spectrum: Partisan Bill (Democrat 1-0)
Status: Introduced on February 2 2024 - 25% progression
Action: 2024-02-02 - Referred to Assignments
Pending: Senate Assignments Committee
Text: Latest bill text (Introduced) [HTML]

Creates the Protect Health Data Privacy Act. Provides that a regulated entity shall disclose and maintain a health data privacy policy that clearly and conspicuously discloses specified information. Sets forth provisions concerning health data privacy policies. Provides that a regulated entity shall not collect, share, or store health data, except in specified circumstances. Provides that it is unlawful for any person to sell or offer to sell health data concerning a consumer without first obtaining valid authorization from the consumer. Provides that a valid authorization to sell consumer health data must contain specified information; a copy of the signed valid authorization must be provided to the consumer; and the seller and purchaser of health data must retain a copy of all valid authorizations for sale of health data for 6 years after the date of its signature or the date when it was last in effect, whichever is later. Sets forth provisions concerning the consent required for collection, sharing, and storage of health data. Provides that a consumer has the right to withdraw consent from the collection, sharing, sale, or storage of the consumer's health data. Provides that it is unlawful for a regulated entity to engage in discriminatory practices against consumers solely because they have not provided consent to the collection, sharing, sale, or storage of their health data or have exercised any other rights provided by the provisions or guaranteed by law. Sets forth provisions concerning a consumer's right to confirm whether a regulated entity is collecting, selling, sharing, or storing any of the consumer's health data; a consumer's right to have the consumer's health data that is collected by a regulated entity deleted; prohibitions regarding geofencing; and consumer health data security. Provides that any person aggrieved by a violation of the provisions shall have a right of action in a State circuit court or as a supplemental claim in federal district court against an offending party. Provides that the Attorney General may enforce a violation of the provisions as an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Defines terms. Makes a conforming change in the Consumer Fraud and Deceptive Business Practices Act.

HEALTH DATA PRIVACY ACT

Sen. Celina Villanueva [D]

Date	Chamber	Action
2024-02-02	Senate	Referred to Assignments
2024-02-02	Senate	First Reading
2024-02-02	Senate	Filed with Secretary by Sen. Celina Villanueva

Chapter	Article	Section	Citation Type	Statute Text
815	505	2EEEE	New Code	See Bill Text

Type	Source
Summary	https://www.ilga.gov/legislation/BillStatus.asp?DocNum=3080&GAID=17&DocTypeID=SB&SessionID=112&GA=103
Text	https://www.ilga.gov/legislation/103/SB/10300SB3080.htm