Bill Title: Creates the Illinois Data Privacy and Protection Act. Provides that a covered entity (any entity or any person, other than an individual acting in a non-commercial context, that alone or jointly with others determines the purposes and means of collecting, processing, or transferring covered data) may not collect, process, or transfer covered data unless the collection, processing, or transfer is limited to what is reasonably necessary and proportionate. Provides that a covered entity and a service provider shall establish, implement, and maintain reasonable policies, practices, and procedures concerning the collection, processing, and transferring of covered data. Contains provisions concerning retaliation; transparency; individual data rights; consent; data protection for children and minors; civil rights; data security; small business protections; executive responsibility; service providers and third parties; enforcement; severability; and rulemaking. Effective 180 days after becoming law.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced) 2024-04-05 - Rule 19(a) / Re-referred to Rules Committee [HB3385 Detail]

Text: Latest bill text (Introduced) [HTML]

---

Sponsors

Name	Type	Sponsorship	District	Financial	Encyclopedia	Biography
Representative Abdelnasser Rashid [D]	Primary	Sponsored Bills	HD-021	FollowTheMoney	Ballotpedia	VoteSmart

Social Comments on IL HB3385