Illinois 104th General Assembly Status: Introduced 1 D cosponsors

SB3890      — CONSUMER DATA PRIVACY

Last action — Rule 3-9(a) / Re-referred to Assignments

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. 1
    Introduced
  2. 2
    In Committee
  3. 3
    Passed Senate
  4. 4
    Passed House
  5. 5
    To Executive
  6. 6
    Enacted

This bill has been introduced in the Senate. Introduced February 06, 2026. It must pass committee before a floor vote.

Next likely step: a committee referral and hearing.

Prognosis

Not enough signal yet

Where this bill stands today.

Odds of enactment

Low

How often bills like it became law.

Not enough signal yet to read this bill's trajectory — we surface a likelihood only once there's real movement (stage, sponsorship, committee, or votes) to point to.

Prognosis reads this bill's own signals — stage, sponsorship breadth, committee status, recorded votes and cross-state momentum. Odds come from a model trained on which bills have become law.

In plain language

The bill establishes data privacy protections for Illinois consumers and regulates data brokers.

This legislation creates the Illinois Data Privacy Protection Act, which applies to businesses handling large amounts of consumer data in Illinois. It grants consumers rights regarding their personal data, sets registration requirements for data brokers, and calls for public access to registration information to facilitate data deletion.

What this means for you
  • Workers: Workers may see improved protection over their personal information processed by employers.
  • Consumers: Consumers are granted new rights to access and manage their personal data held by businesses.

Summary

Creates the Illinois Data Privacy Protection Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. Requires a controller, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Authorizes the Attorney General to enforce the Act. Amends the Personal Information Protection Act. Provides that, annually, on or before January 31, a data broker operating in the State must register with the Attorney General. Provides that the Attorney General shall create a page on its Internet website in which the registration information is accessible to the public that allows consumers to delete their personal information across all registered data brokers. Provides for civil penalties. Amends the State Finance Act to create the Data Privacy Protection Fund. Makes definitions. Makes other changes. Limits the concurrent exercise of home rule powers. Contains a severability provision.

Bill Text

We don't have the full text on file for this bill yet.

Read SB3890 on the official Illinois source →

Action History

  1. Rule 3-9(a) / Re-referred to Assignments

  2. Rule 2-10 Committee/3rd Reading Deadline Established As May 22, 2026

  3. Rule 2-10 Committee/3rd Reading Deadline Established As May 15, 2026

  4. Rule 2-10 Committee Deadline Established As April 24, 2026

  5. Rule 2-10 Committee Deadline Established As March 27, 2026

  6. To AI and Social Media

  7. Assigned to Executive

  8. Referred to Assignments

  9. First Reading

  10. Filed with Secretary by Sen. Rachel Ventura

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 182 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (182)

182 members have not signed on to this bill.

Show all 182 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

civil-rights technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does SB3890      do?
Creates the Illinois Data Privacy Protection Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. Requires a controller, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Authorizes the Attorney General to enforce the Act. Amends the Personal Information Protection Act. Provides that, annually, on or before January 31, a data broker operating in the State must register with the Attorney General. Provides that the Attorney General shall create a page on its Internet website in which the registration information is accessible to the public that allows consumers to delete their personal information across all registered data brokers. Provides for civil penalties. Amends the State Finance Act to create the Data Privacy Protection Fund. Makes definitions. Makes other changes. Limits the concurrent exercise of home rule powers. Contains a severability provision.
Who sponsors SB3890     ?
SB3890      is sponsored by Rachel Ventura (Democrat).
What is the current status of SB3890     ?
This bill has been introduced in the Senate. Introduced February 06, 2026. It must pass committee before a floor vote.
Where can I track SB3890     ?
Track SB3890      free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on SB3890     

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of SB3890     

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →