Illinois
💡 Last Updated October 2025. Written with contributions from both human authors and LLMs. If you find incorrect or outdated information let us know at support@optery.com.
Data brokers are selling your personal information. Optery finds it and removes it for you.
Privacy law in Illinois
There is no signed, comprehensive consumer privacy law in Illinois yet. HB3041, the Illinois Data Privacy and Protection Act, was introduced in the 104th General Assembly on February 6, 2025, and would create broad privacy rights for Illinois residents — but as of this extraction it has not been signed into law. Illinois residents do benefit from existing sector-specific laws and federal protections in the meantime. Optery can still help you remove your personal information from data broker sites regardless of whether a state privacy law is in place.
What protections do exist in Illinois
Illinois Personal Information Protection Act (PIPA)
Requires businesses and government agencies that collect personal information about Illinois residents to notify affected individuals when a data breach occurs that may have compromised their unencrypted personal information, such as Social Security numbers, financial account data, or medical information. (815 ILCS 530/)
Illinois Biometric Information Privacy Act (BIPA)
One of the strongest biometric privacy laws in the country. Prohibits private entities from collecting, using, or selling biometric identifiers (fingerprints, facial scans, iris scans, voiceprints, etc.) without written consent, a published retention policy, and lawful purpose. Grants a private right of action with statutory damages of $1,000–$5,000 per violation. (740 ILCS 14/)
Illinois Genetic Information Privacy Act (GIPA)
Prohibits employers, insurers, and others from collecting, using, or disclosing an individual's genetic information without written consent. Protects genetic test results and family medical history from being used in employment or insurance decisions. (410 ILCS 513/)
Illinois Mental Health and Developmental Disabilities Confidentiality Act
Protects the confidentiality of records and communications relating to mental health or developmental disability services. Prohibits disclosure of such information without the individual's written consent except in narrowly defined circumstances. (740 ILCS 110/)
Illinois Student Online Personal Protection Act (SOPPA)
Restricts how operators of educational websites, apps, and online services may collect, use, and share the personal information of K-12 students in Illinois. Prohibits using student data for targeted advertising and requires operators to maintain reasonable security for student information. (105 ILCS 85/)
Federal protections that apply to Illinois residents
Even without a comprehensive state privacy law, federal rules offer some protection. The FTC's Section 5 authority prohibits unfair or deceptive data practices by most businesses. HIPAA protects medical records held by covered health providers. COPPA requires parental consent before collecting data from children under 13. The Gramm-Leach-Bliley Act covers financial data held by banks and financial institutions. These federal floors apply to Illinois residents today.
What’s happening in the Illinois legislature
Several privacy bills have been introduced in Illinois. None has passed into law yet, but they signal where consumer privacy legislation in the state may be heading.
HB3041 — Illinois Data Privacy and Protection Act
HB3041 would create the Illinois Data Privacy and Protection Act, giving Illinois residents the rights to access, correct, delete, and port their personal data held by covered entities. It would require affirmative express consent before transferring data to third parties or delivering targeted advertising, ban discrimination in data practices, impose strong protections for minors under 17, and allow both the Attorney General and private individuals to sue violators. The bill would take effect 180 days after becoming law. Status: introduced.
How Optery helps Illinois residents
Data brokers collect and sell personal information about almost every American adult — home addresses, phone numbers, family relationships, employment history. They do this regardless of whether your state has a comprehensive privacy law. Optery scans over 200 data brokers to find where your information is exposed, then submits removal requests on your behalf and tracks compliance. Our service works for every US resident, not just those in states with strong privacy statutes.