SB0047 would create a new state registry for data brokers operating in Illinois. The bill defines a data broker as a business that knowingly collects and sells consumers’ personal information to third parties without a direct relationship with the consumer, while excluding entities covered by the federal Fair Credit Reporting Act and the Gramm-Leach-Bliley Act. Each year by January 31, covered data brokers would have to register with the Illinois Attorney General, pay a registration fee set by the Attorney General, and submit specified business and data-practice information.
The Attorney General would be required to publish the registration information on a public website and could enforce the registration requirements through civil penalties. The bill also creates the Data Broker Registry Fund in the State Finance Act, with registration fees and penalties deposited into that fund to cover the costs of administering the registry and maintaining the website. The bill is framed as an amendment to the Personal Information Protection Act and is intended to increase transparency around the data broker industry in Illinois.
Impact
SB0047 would add a new regulatory and disclosure framework for data brokers under the Personal Information Protection Act and create a dedicated fund in the State Finance Act. It would require affected businesses to register annually with the Attorney General, disclose information about their data practices, and pay a fee, while giving the Attorney General authority to maintain a public registry and assess civil penalties for noncompliance. The bill would directly affect data brokers operating in Illinois, and indirectly affect consumers, privacy advocates, and businesses that buy and sell personal data.
Sentiment
No committee transcripts or recorded votes were provided, so there is no documented legislative debate or vote history to gauge support or opposition. Based on the bill text alone, the measure appears to reflect a consumer-privacy and transparency approach, suggesting likely support from privacy advocates and possible concern from data broker businesses and industry groups about compliance costs, disclosure obligations, and regulatory burden.
Contention
The main points of contention are likely to be the scope of the definition of “data broker,” the required disclosures, the Attorney General’s discretion to set the fee, and the public posting of registration information. Businesses in the data brokerage sector may object to administrative costs, potential exposure of proprietary information, and the breadth of information required, while supporters would likely emphasize consumer transparency, accountability, and oversight of the sale of personal data, including sensitive categories such as minors’ data, precise geolocation, and reproductive health care data.
Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.
Relates to data broker regulation; prohibits the acquisition of personally identifiable information through fraudulent means; requires a data broker to develop, implement, and maintain a comprehensive information security program; requires data brokers operating in the state of New York to register with the attorney general.
Requires the registration of data brokers; imposes regulations upon data brokers; establishes a data deletion mechanism for consumers; imposes penalties upon data brokers for violations of the law.
Relating to selection of an attorney by an indigent parent as attorney ad litem for the parent in certain suits affecting the parent-child relationship.