Illinois HB 3494: HEALTH DATA PRIVACY ACT

Bill Text

• 

 Illinois General Assembly - Full Text of HB3494 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

 Select Language

 × 

 The Illinois General Assembly offers the Google Translate™ service for visitor convenience. In no way should it be considered accurate as to the translation of any content herein.

 Visitors of the Illinois General Assembly website are encouraged to use other translation services available on the internet.

 The English language version is always the official and authoritative version of this website.

 NOTE: To return to the original English language version, select the "Show Original" button on the Google Translate™ menu bar at the top of the window.

 Choose Language 

 English 

 Afrikaans 

 Albanian 

 Arabic 

 Armenian 

 Azerbaijani 

 Basque 

 Bengali 

 Bosnian 

 Catalan 

 Croatian 

 Czech 

 Danish 

 Dutch 

 Esperanto 

 Estonian 

 Filipino 

 Finnish 

 French 

 Galician 

 Georgian 

 German 

 Greek 

 Gujarati 

 Haitian Creole 

 Hausa 

 Hawaiian 

 Hebrew 

 Hindi 

 Hungarian 

 Icelandic 

 Indonesian 

 Interlingua 

 Interlingue 

 Inuktitut 

 Irish 

 Italian 

 Japanese 

 Javanese 

 Kannada 

 Khmer 

 Korean 

 Latin 

 Latvian 

 Lithuanian 

 Luxembourgish 

 Macedonian 

 Malagasy 

 Malayalam 

 Maltese 

 Maori 

 Marathi 

 Myanmar 

 Nepali 

 Norwegian 

 Odia 

 Pashto 

 Punjabi 

 Romanian 

 Russian 

 Samoan 

 Sango 

 Sanskrit 

 Sardinian 

 Sindhi 

 Sinhala 

 Slovak 

 Slovenian 

 Somali 

 Southern Sotho 

 Spanish 

 Sundanese 

 Swahili 

 Swedish 

 Tamil 

 Telugu 

 Thai 

 Tigrinya 

 Tonga 

 Turkish 

 Ukrainian 

 Urdu 

 Vietnamese 

 Welsh 

 Xhosa 

 Yiddish 

 Yoruba 

 Zulu 

 Powered by Translate 

 Close 

 Illinois General Assembly

 Top Navigation Bar

 Translate 

 Learn 

 Select General Assembly 

 Search the 104th General Assembly 

 Enter search terms for legislation, members, committees, or schedules. 

 ILGA.GOV 

• 

• 

 LEGISLATION & LAWS 

• Bills & Resolutions 

• Public Acts 

• Illinois Compiled Statutes 

• Illinois Constitution 

• Search Legislation 

• Glossary 

• Guide 

• 

 Reports & Inquiry 

• Legislative Reports 

• Special Reports 

• FTP Site 

• Legislator Lookup 

• Capitol Complex Phone Numbers 

• 

 Rules & Regulations 

• Illinois Register 

• Administrative Rules 

• 

 Senate 

• 
 Members 

• Schedules 

• Committees 

• 

 Request for Remote Testimony 

• Journals 

• Transcripts 

• Rules 

• Audio/Video 

• FOIA Information 

• Senate Employment Opportunities 

• Media Guidelines 

• 

 House 

• 
 Members 

• Schedules 

• Committees 

• 

 Submit testimony for House Committees 

• Journals 

• Transcripts 

• Rules 

• Audio/Video 

• FOIA Information 

• House Employment Opportunities 

• Log In 

 Mobile Top Bar

 Search the 104th General Assembly 

 Enter keywords to search the Illinois General Assembly website. 

 Full Text of HB3494

• Home 

• Legislation 

• Full Text 

 HB3494 - 104th General Assembly 

• 
 Bill Status 

• 
 Full Text 

• 
 Votes 

• 
 Witness Slips 

 Select Menu 

 Bill Status 
 Full Text 
 Votes 
 Witness Slips 
 Printer Friendly Version 

 Introduced 

 Printer Friendly Version 

 Introduced 

 Open PDF 

104TH GENERAL ASSEMBLY 
State of Illinois 
2025 and 2026
HB3494

Introduced 2/18/2025, by Rep. Ann M. Williams 

SYNOPSIS AS INTRODUCED:

New Act

815 ILCS 505/2HHHH new

 Creates the Protect Health Data Privacy Act. Provides that a regulated entity shall disclose and maintain a health data privacy policy that clearly and conspicuously discloses specified information. Sets forth provisions concerning health data privacy policies. Provides that a regulated entity shall not collect, share, or store health data, except in specified circumstances. Provides that it is unlawful for any person to sell or offer to sell health data concerning an individual without first obtaining valid authorization from the individual. Provides that a valid authorization to sell individual health data must contain specified information; a copy of the signed valid authorization must be provided to the individual; and the seller and purchaser of health data must retain a copy of all valid authorizations for sale of health data for 6 years after the date of its signature or the date when it was last in effect, whichever is later. Sets forth provisions concerning the consent required for collection, sharing, and storage of health data. Provides that an individual has the right to withdraw consent from the processing of the individual's health data. Provides that it is unlawful for a regulated entity to engage in discriminatory practices against individuals solely because they have not provided consent to the processing of their health data or have exercised any other rights provided by the provisions or guaranteed by law. Sets forth provisions concerning an individual's right to confirm whether a regulated entity is collecting, selling, sharing, or storing any