HB3712 creates the Privacy Protections for Location Information Derived from Electronic Devices Act, a new Illinois law governing how businesses and other covered entities may collect, process, disclose, and monetize location data from phones and other electronic devices. The bill generally prohibits collection or processing of an individual’s location information unless it is for a defined permissible purpose, such as providing a requested service, completing a transaction, complying with law, or responding to an emergency. Before collecting location data for a permissible purpose, a covered entity must provide a location privacy policy and obtain opt-in consent, with separate consent required for multiple purposes in many cases.
The bill also limits retention, precision, disclosure, and sale of location information. It requires deletion when consent expires, bars selling or leasing location data to third parties, restricts disclosures to government agencies absent a warrant, legal mandate, or narrow emergency circumstances, and prohibits governmental entities from monetizing location information. It further bans retaliation against individuals who refuse consent, allows opt-out from targeted advertising uses, and creates a private right of action with statutory damages, punitive damages, injunctive relief, and attorney’s fees for prevailing plaintiffs. The act includes detailed definitions and a nonapplicability section excluding certain health care, medical education, and research uses.
The bill’s impact on state law would be significant because it would establish a comprehensive statewide privacy framework for geolocation data and create new compliance obligations for businesses, app developers, service providers, and others that handle location information. It would also expose violators to civil litigation and substantial damages, while limiting the enforceability of contractual waivers and mandatory arbitration provisions. In practice, the measure would affect mobile apps, advertising technology, data brokers, connected vehicles, and any commercial entity that tracks or shares precise location data in Illinois.
The overall sentiment reflected in the bill text is strongly protective of privacy and civil liberties. The legislative intent section explicitly ties the measure to reproductive health access, LGBTQ safety, religious liberty, and freedom of movement, indicating that the bill is designed to address concerns about surveillance and misuse of location data. No committee transcript or vote history was provided, so there is no recorded debate or voting pattern to indicate broader legislative support or opposition.
The main points of contention likely center on the breadth of the restrictions and the litigation risk. Businesses and data-driven services may object to the consent requirements, limits on retention and disclosure, and the private right of action with $5,000-per-violation damages and attorney’s fees. Government and public-safety stakeholders may also scrutinize the warrant requirement and the narrow emergency exceptions, while privacy advocates are likely to support those same provisions as necessary safeguards against misuse of sensitive location data.
HB3712 would add a new Illinois statutory scheme regulating location information derived from electronic devices. It would impose consent, notice, retention, disclosure, and anti-retaliation requirements on covered entities, restrict government access and monetization of location data, and create a private enforcement mechanism with statutory damages, punitive damages, and attorney’s fees. The bill would also limit contractual waivers and exclude certain health care and research-related uses from coverage.
The bill is framed in strongly pro-privacy terms and is intended to protect sensitive personal activities and vulnerable populations. Its stated purpose suggests support from privacy, reproductive rights, LGBTQ safety, and civil liberties advocates. No committee discussion or vote record is available, so there is no direct evidence of legislative opposition or support beyond the bill’s text.
Likely areas of contention include the scope of the definition of location information, the requirement for opt-in consent and separate consent for multiple purposes, the ban on sale or disclosure of location data, and the private right of action with significant damages and fee shifting. Businesses, advertisers, app developers, and data brokers may view the bill as burdensome and litigation-prone, while law enforcement and public agencies may be concerned about the warrant and emergency-access restrictions. Privacy advocates would likely support these provisions as necessary to prevent surveillance and data exploitation.