DATA BROKER REGISTER/DELETION
HB2913 creates the Data Broker Registration and Accessible Deletion Mechanism Act. The bill would require any data broker operating in Illinois to register annually with the Attorney General by January 31, pay a registration fee set by the Attorney General, and disclose specified information about its data practices, including whether it collects minors’ data, precise geolocation, reproductive health care data, and whether it is subject to federal privacy laws such as the Fair Credit Reporting Act or Gramm-Leach-Bliley Act. The Attorney General would be required to publish the registration information on a public website and collect fees into a new Data Broker Registry Fund.
The bill also directs the Attorney General to establish, by January 1, 2027, an accessible deletion mechanism that would let consumers submit a single verifiable request to delete their personal information from all registered data brokers. The mechanism must be free to consumers, accessible to people with disabilities, available in multiple languages, and support authorized agents. After a valid request, data brokers would need to delete covered information, direct service providers and contractors to do the same, and in some cases treat unverifiable requests as opt-outs from sale or sharing. The bill further requires periodic independent audits beginning in 2029 and makes violations enforceable under the Consumer Fraud and Deceptive Business Practices Act.
HB2913 would add a new regulatory framework to Illinois law governing data brokers, creating new registration, disclosure, fee, and enforcement obligations. It would amend the State Finance Act to create the Data Broker Registry Fund and amend the Consumer Fraud and Deceptive Business Practices Act to make violations of the deletion requirements an unlawful practice subject to Attorney General enforcement. The bill would directly affect data brokers, their service providers and contractors, and consumers seeking to control the collection and deletion of their personal information.
Based on the bill text and the absence of recorded committee testimony or votes in the provided materials, the bill appears to be framed as a consumer privacy and transparency measure rather than a controversial partisan proposal in the available record. Its stated purpose suggests support for stronger consumer control over personal data, public disclosure of broker practices, and state oversight of the data broker industry. No formal vote history or hearing transcript is provided to show broader legislative sentiment.
The main points of potential contention are the compliance and administrative burdens placed on data brokers, including annual registration, fee payment, public disclosure of business practices, deletion processing, periodic audits, and ongoing access to a state-run mechanism. Privacy advocates would likely support the consumer deletion rights and transparency requirements, while industry stakeholders may object to the scope of required disclosures, the cost of compliance, and the operational complexity of a single statewide deletion system. The bill also raises implementation questions for the Attorney General, including fee setting, website administration, multilingual and accessibility requirements, and enforcement capacity.