Illinois 104th General Assembly Status: Introduced 1 D cosponsors

SB2875      — CONSUMER DATA PRIVACY

Last action — Senate Committee Amendment No. 1 Rule 3-9(a) / Re-referred to Assignments

  1. 1
    Introduced
  2. 2
    In Committee
  3. 3
    Passed Senate
  4. 4
    Passed House
  5. 5
    To Executive
  6. 6
    Enacted

This bill has been introduced in the Senate. Introduced January 16, 2026. It must pass committee before a floor vote.

Next likely step: a committee referral and hearing.

Odds of enactment

Low chance

Based on the sponsor, cosponsors, and committee posture, this bill has a low chance of becoming law.

Upgrade to see the exact probability and what's driving it.

A statistical estimate from our own model of past outcomes — an insight, not a guarantee. Policymaking is volatile.

Prognosis

Not enough signal yet

Not enough signal yet to read this bill's trajectory — we surface a likelihood only once there's real movement (stage, sponsorship, committee, or votes) to point to.

Based on stage, sponsorship breadth, committee status, recorded votes, and cross-state momentum — a description of the observable signals, not a prediction.

In plain language

Establishes the Illinois Consumer Data Privacy Act to regulate personal data handling by businesses.

The Illinois Consumer Data Privacy Act sets rules for businesses that process large amounts of personal data from Illinois residents. It gives consumers rights regarding their data, including access, corrections, and information on disclosures.

What this means for you
  • Consumers: Consumers gain rights to access and manage their personal data as well as be informed about its use.

Summary

Creates the Illinois Consumer Data Privacy Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. "Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person but does not include deidentified data or publicly available information. Requires a controller who, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Creates an appeal process for a consumer to gather more information on the actions of a covered entity. Exempts the State, a political subdivision of the State, and units of local government, a federally recognized Indian tribe, nonprofits established to prevent insurance fraud, and data already covered by federal law. Authorizes the Attorney General to enforce the Act. Makes definitions. Makes other changes. Limits the concurrent exercise of home rule powers. Contains a severability provision.

Bill Text

We don't have the full text on file for this bill yet.

Read SB2875 on the official Illinois source →

Action History

  1. Senate Committee Amendment No. 1 Rule 3-9(a) / Re-referred to Assignments

  2. Rule 3-9(a) / Re-referred to Assignments

  3. Rule 2-10 Committee/3rd Reading Deadline Established As May 22, 2026

  4. Rule 2-10 Committee/3rd Reading Deadline Established As May 15, 2026

  5. Rule 2-10 Committee Deadline Established As April 24, 2026

  6. Rule 2-10 Committee Deadline Established As March 27, 2026

  7. Senate Committee Amendment No. 1 To AI and Social Media

  8. Senate Committee Amendment No. 1 Assignments Refers to Executive

  9. Senate Committee Amendment No. 1 Referred to Assignments

  10. Senate Committee Amendment No. 1 Filed with Secretary by Sen. Laura M. Murphy

  11. To AI and Social Media

  12. Assigned to Executive

  13. Referred to Assignments

  14. First Reading

  15. Filed with Secretary by Sen. Laura M. Murphy

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

1 sponsors · 0 co-sponsors · 182 not signed on

Sponsors (1)

Co-sponsors (0)

None.

Not signed on (182)

182 members have not signed on to this bill.

Show all 182 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Subjects

civil-rights technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does SB2875      do?
Creates the Illinois Consumer Data Privacy Act. Applies to legal entities that conduct business in Illinois or produce products or services that are targeted to Illinois residents and that satisfy one or more of the following thresholds: during a calendar year, controls or processes personal data of 100,000 consumers or more, excluding personal data controlled or processed solely for the purpose of completing a payment transaction; or derives over 25% of gross revenue from the sale of personal data and processes or controls personal data of 25,000 consumers or more. "Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person but does not include deidentified data or publicly available information. Requires a controller who, alone or jointly with others, to consider the purposes and means of the processing of personal data in protecting the security of consumers while processing personal data and in notifying consumers of a breach of the security of the system. Authorizes rights to consumers under the Act to include, but not be limited to, the right to access their personal data, obtain a list of third parties to whom their data has been disclosed, request corrections to inaccurate data, and question the profiling of their information. Creates an appeal process for a consumer to gather more information on the actions of a covered entity. Exempts the State, a political subdivision of the State, and units of local government, a federally recognized Indian tribe, nonprofits established to prevent insurance fraud, and data already covered by federal law. Authorizes the Attorney General to enforce the Act. Makes definitions. Makes other changes. Limits the concurrent exercise of home rule powers. Contains a severability provision.
Who sponsors SB2875     ?
SB2875      is sponsored by Laura M. Murphy (Democrat).
What is the current status of SB2875     ?
This bill has been introduced in the Senate. Introduced January 16, 2026. It must pass committee before a floor vote.
Where can I track SB2875     ?
Track SB2875      free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on SB2875     

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of SB2875     

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →