Illinois · House Bill 3385 · 103rd General Assembly

DATA PRIVACY AND PROTECTION

  1. Introduced Feb 17, 2023
  2. In committee Feb 17, 2023
  3. Died  
  4. Passed the Senate  
  5. To the governor  
  6. Became law  

What it does

The legislature's own summary of the bill, or its official long title.

Creates the Illinois Data Privacy and Protection Act. Provides that a covered entity (any entity or any person, other than an individual acting in a non-commercial context, that alone or jointly with others determines the purposes and means of collecting, processing, or transferring covered data) may not collect, process, or transfer covered data unless the collection, processing, or transfer is limited to what is…

Read the full title (135 words)

Creates the Illinois Data Privacy and Protection Act. Provides that a covered entity (any entity or any person, other than an individual acting in a non-commercial context, that alone or jointly with others determines the purposes and means of collecting, processing, or transferring covered data) may not collect, process, or transfer covered data unless the collection, processing, or transfer is limited to what is reasonably necessary and proportionate. Provides that a covered entity and a service provider shall establish, implement, and maintain reasonable policies, practices, and procedures concerning the collection, processing, and transferring of covered data. Contains provisions concerning retaliation; transparency; individual data rights; consent; data protection for children and minors; civil rights; data security; small business protections; executive responsibility; service providers and third parties; enforcement; severability; and rulemaking. Effective 180 days after becoming law.

Every action

8 steps, oldest first, as the legislature records them.

  1. HouseFiled with the Clerk by Rep. Abdelnasser Rashid
  2. HouseFirst Reading
  3. CommitteeReferred to Rules Committee · House Rules
  4. CommitteeAssigned to Cybersecurity, Data Analytics, & IT Committee · House Cybersecurity, Data Analytics, & IT
  5. CommitteeRule 19(a) / Re-referred to Rules Committee · House Rules
  6. CommitteeAssigned to Cybersecurity, Data Analytics, & IT Committee · House Cybersecurity, Data Analytics, & IT
  7. CommitteeRule 19(a) / Re-referred to Rules Committee · House Rules
  8. HouseSession Sine Die

Roll calls

No recorded votes on this bill yet.

Sponsors

The member who introduced it.

From Illinois's official records (www.ilga.gov), checked Nov 13, 2026. Text links go to the official versions; LegiList does not copy bill text.