Illinois SB 2875: CONSUMER DATA PRIVACY

Bill Text

• 

 Illinois General Assembly - Full Text of SB2875 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

 Select Language

 × 

 The Illinois General Assembly offers the Google Translate™ service for visitor convenience. In no way should it be considered accurate as to the translation of any content herein.

 Visitors of the Illinois General Assembly website are encouraged to use other translation services available on the internet.

 The English language version is always the official and authoritative version of this website.

 NOTE: To return to the original English language version, select the "Show Original" button on the Google Translate™ menu bar at the top of the window.

 Choose Language 

 English 

 Afrikaans 

 Albanian 

 Arabic 

 Armenian 

 Azerbaijani 

 Basque 

 Bengali 

 Bosnian 

 Catalan 

 Croatian 

 Czech 

 Danish 

 Dutch 

 Esperanto 

 Estonian 

 Filipino 

 Finnish 

 French 

 Galician 

 Georgian 

 German 

 Greek 

 Gujarati 

 Haitian Creole 

 Hausa 

 Hawaiian 

 Hebrew 

 Hindi 

 Hungarian 

 Icelandic 

 Indonesian 

 Interlingua 

 Interlingue 

 Inuktitut 

 Irish 

 Italian 

 Japanese 

 Javanese 

 Kannada 

 Khmer 

 Korean 

 Latin 

 Latvian 

 Lithuanian 

 Luxembourgish 

 Macedonian 

 Malagasy 

 Malayalam 

 Maltese 

 Maori 

 Marathi 

 Myanmar 

 Nepali 

 Norwegian 

 Odia 

 Pashto 

 Punjabi 

 Romanian 

 Russian 

 Samoan 

 Sango 

 Sanskrit 

 Sardinian 

 Sindhi 

 Sinhala 

 Slovak 

 Slovenian 

 Somali 

 Southern Sotho 

 Spanish 

 Sundanese 

 Swahili 

 Swedish 

 Tamil 

 Telugu 

 Thai 

 Tigrinya 

 Tonga 

 Turkish 

 Ukrainian 

 Urdu 

 Vietnamese 

 Welsh 

 Xhosa 

 Yiddish 

 Yoruba 

 Zulu 

 Powered by Translate 

 Close 

 Illinois General Assembly

 Top Navigation Bar

 Translate 

 Learn 

 Select General Assembly 

 Search the 104th General Assembly 

 Enter search terms for legislation, members, committees, or schedules. 

 ILGA.GOV 

• 

• 

 LEGISLATION & LAWS 

• Bills & Resolutions 

• Public Acts 

• Illinois Compiled Statutes 

• Illinois Constitution 

• Search Legislation 

• Glossary 

• Guide 

• 

 Reports & Inquiry 

• Legislative Reports 

• Special Reports 

• FTP Site 

• Legislator Lookup 

• Capitol Complex Phone Numbers 

• 

 Rules & Regulations 

• Illinois Register 

• Administrative Rules 

• 

 Senate 

• 
 Members 

• Schedules 

• Committees 

• 

 Request for Remote Testimony 

• Journals 

• Transcripts 

• Rules 

• Audio/Video 

• FOIA Information 

• Senate Employment Opportunities 

• Media Guidelines 

• 

 House 

• 
 Members 

• Schedules 

• Committees 

• 

 Submit testimony for House Committees 

• Journals 

• Transcripts 

• Rules 

• Audio/Video 

• FOIA Information 

• House Employment Opportunities 

• Log In 

 Mobile Top Bar

 Search the 104th General Assembly 

 Enter keywords to search the Illinois General Assembly website. 

 Full Text of SB2875

• Home 

• Legislation 

• Full Text 

 SB2875 - 104th General Assembly 

• 
 Bill Status 

• 
 Full Text 

• 
 Votes 

• 
 Witness Slips 

 Select Menu 

 Bill Status 
 Full Text 
 Votes 
 Witness Slips 
 Printer Friendly Version 

 Introduced 

 Senate Amendment 001 

 Printer Friendly Version 

 Introduced 

 Senate Amendment 001 

 Open PDF 

104TH GENERAL ASSEMBLY 
State of Illinois 
2025 and 2026
SB2875

Introduced 1/16/2026, by Sen. Laura M. Murphy 

SYNOPSIS AS INTRODUCED:

New Act

 Creates the Illinois Consumer Data Privacy Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. "Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person but does not include deidentified data or publicly available information. Requires a controller who, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Creates an appeal process for a consumer to gather more information on the actions of a covered entity. Exempts the State, a political subdivision of the State, and units of local government, a federally recognized Indian tribe, nonprofits establi